General

  • Target

    94b8f98d0accb26bf2139dfb2eadd45ce156aee072c738cdb1c43a8d2e0bb444

  • Size

    297KB

  • Sample

    241107-bh6tws1kg1

  • MD5

    54ff514116956db0d324d29f5f62c87c

  • SHA1

    f2930c416b28d47cf7a2275b1b5dc0b8bd3ae0ea

  • SHA256

    94b8f98d0accb26bf2139dfb2eadd45ce156aee072c738cdb1c43a8d2e0bb444

  • SHA512

    96c46f66dcf137e71c184a9ce23e94b3954a0de56fc69b1af54b37f5f46e31e21bfb41f25708adb5a317f5f57188a6c96f20624adaab435234e9cc4a1a900ed2

  • SSDEEP

    6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      94b8f98d0accb26bf2139dfb2eadd45ce156aee072c738cdb1c43a8d2e0bb444

    • Size

      297KB

    • MD5

      54ff514116956db0d324d29f5f62c87c

    • SHA1

      f2930c416b28d47cf7a2275b1b5dc0b8bd3ae0ea

    • SHA256

      94b8f98d0accb26bf2139dfb2eadd45ce156aee072c738cdb1c43a8d2e0bb444

    • SHA512

      96c46f66dcf137e71c184a9ce23e94b3954a0de56fc69b1af54b37f5f46e31e21bfb41f25708adb5a317f5f57188a6c96f20624adaab435234e9cc4a1a900ed2

    • SSDEEP

      6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks