General

  • Target

    458c1aa665ed1e13c97a7b9b740a8e03df4894a87d18f165a55b289fa7b945bb

  • Size

    423KB

  • Sample

    241105-lvb56ayera

  • MD5

    5eee48f361a0751885a07a62b8ecec2f

  • SHA1

    b827393c08714b14e6515d5053a850b61d70d593

  • SHA256

    458c1aa665ed1e13c97a7b9b740a8e03df4894a87d18f165a55b289fa7b945bb

  • SHA512

    b6701b46fc941a880b06817423ae948c5bd5c6f14cc2d25268bff4f2e67b83352c9ce98394716c28f4d138fe7d454d36810bea636947dfe2d1b408c06b1ff6ed

  • SSDEEP

    6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      458c1aa665ed1e13c97a7b9b740a8e03df4894a87d18f165a55b289fa7b945bb

    • Size

      423KB

    • MD5

      5eee48f361a0751885a07a62b8ecec2f

    • SHA1

      b827393c08714b14e6515d5053a850b61d70d593

    • SHA256

      458c1aa665ed1e13c97a7b9b740a8e03df4894a87d18f165a55b289fa7b945bb

    • SHA512

      b6701b46fc941a880b06817423ae948c5bd5c6f14cc2d25268bff4f2e67b83352c9ce98394716c28f4d138fe7d454d36810bea636947dfe2d1b408c06b1ff6ed

    • SSDEEP

      6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks