General

  • Target

    212771bed86e51e4bffcf3ee51c77de279dd4273c1bb1b294d667a7b7a9f7a4e

  • Size

    371KB

  • Sample

    241105-b72lgasemj

  • MD5

    489e1bbb3cceb2cbc9d930bb9beafd3f

  • SHA1

    6b53449f5c756524118f3528f628fccf0dddbc45

  • SHA256

    212771bed86e51e4bffcf3ee51c77de279dd4273c1bb1b294d667a7b7a9f7a4e

  • SHA512

    51dec5dba82a7be81b2a27ed1198983c5b22a22a4c8e1268468292767d0b146bb7afe99d8b1303a7c243d5ff59dd2530c26650e00f606177768f2d0157eb0d63

  • SSDEEP

    6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      212771bed86e51e4bffcf3ee51c77de279dd4273c1bb1b294d667a7b7a9f7a4e

    • Size

      371KB

    • MD5

      489e1bbb3cceb2cbc9d930bb9beafd3f

    • SHA1

      6b53449f5c756524118f3528f628fccf0dddbc45

    • SHA256

      212771bed86e51e4bffcf3ee51c77de279dd4273c1bb1b294d667a7b7a9f7a4e

    • SHA512

      51dec5dba82a7be81b2a27ed1198983c5b22a22a4c8e1268468292767d0b146bb7afe99d8b1303a7c243d5ff59dd2530c26650e00f606177768f2d0157eb0d63

    • SSDEEP

      6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks