General

  • Target

    36efe15bd70578dc5b0ba16a035ef93f5186441014d289db600cef16bdd9865e

  • Size

    423KB

  • Sample

    241106-1y6lha1maj

  • MD5

    7d983114ba6c9d64fa1628b81b3e77de

  • SHA1

    f1370140cc8cab498a2d8387b412ed172d61262e

  • SHA256

    36efe15bd70578dc5b0ba16a035ef93f5186441014d289db600cef16bdd9865e

  • SHA512

    f09daf7867d78066989d9983124f2e59d31b1bdd732c0df66168a0f871b6d0c3858dca37c499ad21f20cbe2584e1ab1728af219278ae8db52fec74cf200f5919

  • SSDEEP

    6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      36efe15bd70578dc5b0ba16a035ef93f5186441014d289db600cef16bdd9865e

    • Size

      423KB

    • MD5

      7d983114ba6c9d64fa1628b81b3e77de

    • SHA1

      f1370140cc8cab498a2d8387b412ed172d61262e

    • SHA256

      36efe15bd70578dc5b0ba16a035ef93f5186441014d289db600cef16bdd9865e

    • SHA512

      f09daf7867d78066989d9983124f2e59d31b1bdd732c0df66168a0f871b6d0c3858dca37c499ad21f20cbe2584e1ab1728af219278ae8db52fec74cf200f5919

    • SSDEEP

      6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks