General

  • Target

    3218a8050659aa5b25c187ee9f448305691640960d6bef6ec2e39fd2fdf34567

  • Size

    371KB

  • Sample

    241105-hx5cyaxflk

  • MD5

    ecda841e822374534b31b1b35f24a318

  • SHA1

    6b0676d1367d377fe58a19a8a16073e24dd150b2

  • SHA256

    3218a8050659aa5b25c187ee9f448305691640960d6bef6ec2e39fd2fdf34567

  • SHA512

    c61f5a61114f8472b77367036491d148ce675d0bff51a85606508e2fb27f8df3e57c4e3c5005be12bc96f2c2c521251452a8a4a7e6cd55b2e46d8a056d48438a

  • SSDEEP

    6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      3218a8050659aa5b25c187ee9f448305691640960d6bef6ec2e39fd2fdf34567

    • Size

      371KB

    • MD5

      ecda841e822374534b31b1b35f24a318

    • SHA1

      6b0676d1367d377fe58a19a8a16073e24dd150b2

    • SHA256

      3218a8050659aa5b25c187ee9f448305691640960d6bef6ec2e39fd2fdf34567

    • SHA512

      c61f5a61114f8472b77367036491d148ce675d0bff51a85606508e2fb27f8df3e57c4e3c5005be12bc96f2c2c521251452a8a4a7e6cd55b2e46d8a056d48438a

    • SSDEEP

      6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks