General

  • Target

    764a787d5717bc50491e8493af0fa6f8b928fe149a0ac052d2339ab4fc59d064

  • Size

    371KB

  • Sample

    241105-hxq6bawmds

  • MD5

    56344752031ec118fad985540b1156eb

  • SHA1

    6f87e06d20b159c00bf09a24226fea087b93b297

  • SHA256

    764a787d5717bc50491e8493af0fa6f8b928fe149a0ac052d2339ab4fc59d064

  • SHA512

    519c799755c04647ee85dab58b2a81edc92f706ab272418694ef413d49784d6bb38d79d93591a31963b4e88f4b424c057f89cc2a5a2e8a4e2f53e1ab49435301

  • SSDEEP

    6144:OCXITG+urF+W2/cH8J6yr/bAxgPLrk1sx5b7ITsqXigaXwVfZ:OCXITDDWmx6BOj8O17R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      764a787d5717bc50491e8493af0fa6f8b928fe149a0ac052d2339ab4fc59d064

    • Size

      371KB

    • MD5

      56344752031ec118fad985540b1156eb

    • SHA1

      6f87e06d20b159c00bf09a24226fea087b93b297

    • SHA256

      764a787d5717bc50491e8493af0fa6f8b928fe149a0ac052d2339ab4fc59d064

    • SHA512

      519c799755c04647ee85dab58b2a81edc92f706ab272418694ef413d49784d6bb38d79d93591a31963b4e88f4b424c057f89cc2a5a2e8a4e2f53e1ab49435301

    • SSDEEP

      6144:OCXITG+urF+W2/cH8J6yr/bAxgPLrk1sx5b7ITsqXigaXwVfZ:OCXITDDWmx6BOj8O17R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks