General

  • Target

    8e67d7349645c6ebe33467f4dddb9845beba97c6c825e76211b4230d06d6ced3

  • Size

    371KB

  • Sample

    241105-mlbcyazapc

  • MD5

    e23c7d8a3f1a93c1b783acd9100226ac

  • SHA1

    5c4b0b12ab02484221cd9c169244a439aca7817e

  • SHA256

    8e67d7349645c6ebe33467f4dddb9845beba97c6c825e76211b4230d06d6ced3

  • SHA512

    88e323219182be9816fa21bc783a9af7275e7f2bd483947053d1fa46aafbe273d9c37e36c58dedd6683d5d800f7e4cf5dae39c45c15d8ae3d2f011487a50947c

  • SSDEEP

    6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      8e67d7349645c6ebe33467f4dddb9845beba97c6c825e76211b4230d06d6ced3

    • Size

      371KB

    • MD5

      e23c7d8a3f1a93c1b783acd9100226ac

    • SHA1

      5c4b0b12ab02484221cd9c169244a439aca7817e

    • SHA256

      8e67d7349645c6ebe33467f4dddb9845beba97c6c825e76211b4230d06d6ced3

    • SHA512

      88e323219182be9816fa21bc783a9af7275e7f2bd483947053d1fa46aafbe273d9c37e36c58dedd6683d5d800f7e4cf5dae39c45c15d8ae3d2f011487a50947c

    • SSDEEP

      6144:YnhF/lqEwRXUPzi9sgiZo4nG6Wp39Ezb7ITsqXigaXwVfi:ohF/lN/z+wDnVimP7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks