General

  • Target

    51bd07876e98fc4dd6060480e3c21b62b3f7b92330c0ecb4cb4df199b20bf90e

  • Size

    438KB

  • Sample

    241107-g1e2sawmhz

  • MD5

    b82e23980345c540152bf16c40d66fda

  • SHA1

    5fc8c70ad799f7250bb36cecd264226801f516ac

  • SHA256

    51bd07876e98fc4dd6060480e3c21b62b3f7b92330c0ecb4cb4df199b20bf90e

  • SHA512

    bce2e010d16f28c2e210b5bc0a1fe6b929cd001934631a2a5ab2a66e4b148a63944af3c48f7a9c55a2d2cb5edf0c4be60470733a34d1c1e508ed44b729cb94a8

  • SSDEEP

    12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      51bd07876e98fc4dd6060480e3c21b62b3f7b92330c0ecb4cb4df199b20bf90e

    • Size

      438KB

    • MD5

      b82e23980345c540152bf16c40d66fda

    • SHA1

      5fc8c70ad799f7250bb36cecd264226801f516ac

    • SHA256

      51bd07876e98fc4dd6060480e3c21b62b3f7b92330c0ecb4cb4df199b20bf90e

    • SHA512

      bce2e010d16f28c2e210b5bc0a1fe6b929cd001934631a2a5ab2a66e4b148a63944af3c48f7a9c55a2d2cb5edf0c4be60470733a34d1c1e508ed44b729cb94a8

    • SSDEEP

      12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks