General

  • Target

    e953e1ba7879f29229fc8bd9a85fe48598d82257ee556f75eec1e670a2ae2413

  • Size

    298KB

  • Sample

    241105-hpahlayrdn

  • MD5

    c8da44bdf1b3650e678f61bcada04952

  • SHA1

    7a75347624f252e2f0d9c52abe77e1da5fc2a937

  • SHA256

    e953e1ba7879f29229fc8bd9a85fe48598d82257ee556f75eec1e670a2ae2413

  • SHA512

    588361cba42b3131bf5b58e41f4c70fc82ee11d4551eb54d90a1148a8ca0dfa32954dcc161202d95181f3385d69aa7d73270a88a101816e5e8ff9b21eb62db09

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      e953e1ba7879f29229fc8bd9a85fe48598d82257ee556f75eec1e670a2ae2413

    • Size

      298KB

    • MD5

      c8da44bdf1b3650e678f61bcada04952

    • SHA1

      7a75347624f252e2f0d9c52abe77e1da5fc2a937

    • SHA256

      e953e1ba7879f29229fc8bd9a85fe48598d82257ee556f75eec1e670a2ae2413

    • SHA512

      588361cba42b3131bf5b58e41f4c70fc82ee11d4551eb54d90a1148a8ca0dfa32954dcc161202d95181f3385d69aa7d73270a88a101816e5e8ff9b21eb62db09

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks