General

  • Target

    74eb12ddeec55b63164b5c66dd6d9f249257119bcd255ca4ddb0b687a1cd8825

  • Size

    297KB

  • Sample

    241107-klvqgaykgy

  • MD5

    eafd1ce2727096f3f2665b0ee23a54a9

  • SHA1

    e5d23b2fd6222b48a12c1d0f4142af4f402bef9d

  • SHA256

    74eb12ddeec55b63164b5c66dd6d9f249257119bcd255ca4ddb0b687a1cd8825

  • SHA512

    d1fcbbc491f05ac4c66c292fae19dacb7dff7a2f8f2ecb5d535ed84240ea0cd9bbe8420f2ed2966af9834c2595ff656dc275154ba59a90d17a7e3ba8227bf846

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      74eb12ddeec55b63164b5c66dd6d9f249257119bcd255ca4ddb0b687a1cd8825

    • Size

      297KB

    • MD5

      eafd1ce2727096f3f2665b0ee23a54a9

    • SHA1

      e5d23b2fd6222b48a12c1d0f4142af4f402bef9d

    • SHA256

      74eb12ddeec55b63164b5c66dd6d9f249257119bcd255ca4ddb0b687a1cd8825

    • SHA512

      d1fcbbc491f05ac4c66c292fae19dacb7dff7a2f8f2ecb5d535ed84240ea0cd9bbe8420f2ed2966af9834c2595ff656dc275154ba59a90d17a7e3ba8227bf846

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks