General

  • Target

    0f0e400910c5ab8a11bb2aa4c2dec76298c44647eab74784ce735ce151e49aa8

  • Size

    297KB

  • Sample

    241105-r9we8ssmbw

  • MD5

    acbecdd44c3e0d734ee5adec1eb63df6

  • SHA1

    7308009675c300358955e48ec32191059f6c493b

  • SHA256

    0f0e400910c5ab8a11bb2aa4c2dec76298c44647eab74784ce735ce151e49aa8

  • SHA512

    5b1116f348a85610024cd661ca1b3f438a4fc809f018a9dceca6affc9a1323fff8f992f8063f197fd8608c0a5ed1aa2266e3be2f2386ef87cf6495520a586cd3

  • SSDEEP

    6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      0f0e400910c5ab8a11bb2aa4c2dec76298c44647eab74784ce735ce151e49aa8

    • Size

      297KB

    • MD5

      acbecdd44c3e0d734ee5adec1eb63df6

    • SHA1

      7308009675c300358955e48ec32191059f6c493b

    • SHA256

      0f0e400910c5ab8a11bb2aa4c2dec76298c44647eab74784ce735ce151e49aa8

    • SHA512

      5b1116f348a85610024cd661ca1b3f438a4fc809f018a9dceca6affc9a1323fff8f992f8063f197fd8608c0a5ed1aa2266e3be2f2386ef87cf6495520a586cd3

    • SSDEEP

      6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks