General

  • Target

    405b8d922210ce54b96c08368771ce09a3c40d54e889c95dfc6326d73fcadcfd

  • Size

    297KB

  • Sample

    241105-chdc1svlak

  • MD5

    e1fbfaf7461e37157b0b1fe6f3abfcc6

  • SHA1

    f08c9c2318b637f4d75ab992661d1847c96892ce

  • SHA256

    405b8d922210ce54b96c08368771ce09a3c40d54e889c95dfc6326d73fcadcfd

  • SHA512

    219a0cc62f00671f60e792823a29b870c9cef76d17a776d3ca1b33987718f5e39d31d23e1a9a407101137c51db859f9a54f42efa9568418217e2d7c712bce5fe

  • SSDEEP

    6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      405b8d922210ce54b96c08368771ce09a3c40d54e889c95dfc6326d73fcadcfd

    • Size

      297KB

    • MD5

      e1fbfaf7461e37157b0b1fe6f3abfcc6

    • SHA1

      f08c9c2318b637f4d75ab992661d1847c96892ce

    • SHA256

      405b8d922210ce54b96c08368771ce09a3c40d54e889c95dfc6326d73fcadcfd

    • SHA512

      219a0cc62f00671f60e792823a29b870c9cef76d17a776d3ca1b33987718f5e39d31d23e1a9a407101137c51db859f9a54f42efa9568418217e2d7c712bce5fe

    • SSDEEP

      6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks