General

  • Target

    45637c89e31bbad5a39779c936cae77eac13734fde426a6e0bc90755bbb7a17c

  • Size

    297KB

  • Sample

    241105-vh8s2avcrb

  • MD5

    01daec6f2e1f6c633da9f7b823a353be

  • SHA1

    be4462c047af86d7ab8315b02b007de356583fea

  • SHA256

    45637c89e31bbad5a39779c936cae77eac13734fde426a6e0bc90755bbb7a17c

  • SHA512

    e8b66832842cfeaed8d58d5430932fc6dc2de2f4b7a7010cd50fe0e585e3d2bf8a360dbb1581ff39c3d40d599228fbc98d6829c13f23ce782fed12c309f6f692

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      45637c89e31bbad5a39779c936cae77eac13734fde426a6e0bc90755bbb7a17c

    • Size

      297KB

    • MD5

      01daec6f2e1f6c633da9f7b823a353be

    • SHA1

      be4462c047af86d7ab8315b02b007de356583fea

    • SHA256

      45637c89e31bbad5a39779c936cae77eac13734fde426a6e0bc90755bbb7a17c

    • SHA512

      e8b66832842cfeaed8d58d5430932fc6dc2de2f4b7a7010cd50fe0e585e3d2bf8a360dbb1581ff39c3d40d599228fbc98d6829c13f23ce782fed12c309f6f692

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks