General

  • Target

    98177b4fa2c8022a4b5c6d19949009bad3410d87b85019a8fb4708342f184e31

  • Size

    371KB

  • Sample

    241106-xsd3hsyjhq

  • MD5

    198afec24ca4b47b5fcfe0d90fcbe7f7

  • SHA1

    088e6a9afb1ef7c48588bf85ba58e3d109fcdc7e

  • SHA256

    98177b4fa2c8022a4b5c6d19949009bad3410d87b85019a8fb4708342f184e31

  • SHA512

    5c2c644e586da8daf16b038ff411a3698749d96d27446656354ba7b6ac5e3ce0042340c8cdeb6e49d890913a80e78d3ac2c632571cb34e05391833b3a99fba4a

  • SSDEEP

    6144:OCXITG+urF+W2/cH8J6yr/bAxgPLrk1sx5b7ITsqXigaXwVfZ:OCXITDDWmx6BOj8O17R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      98177b4fa2c8022a4b5c6d19949009bad3410d87b85019a8fb4708342f184e31

    • Size

      371KB

    • MD5

      198afec24ca4b47b5fcfe0d90fcbe7f7

    • SHA1

      088e6a9afb1ef7c48588bf85ba58e3d109fcdc7e

    • SHA256

      98177b4fa2c8022a4b5c6d19949009bad3410d87b85019a8fb4708342f184e31

    • SHA512

      5c2c644e586da8daf16b038ff411a3698749d96d27446656354ba7b6ac5e3ce0042340c8cdeb6e49d890913a80e78d3ac2c632571cb34e05391833b3a99fba4a

    • SSDEEP

      6144:OCXITG+urF+W2/cH8J6yr/bAxgPLrk1sx5b7ITsqXigaXwVfZ:OCXITDDWmx6BOj8O17R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks