General

  • Target

    50fd0fab483003df125a95251ce74a8039dd4f2b6675d8b25a4e7c016411a761

  • Size

    383KB

  • Sample

    241107-l6z2cszkdw

  • MD5

    88d329cb8ad5a95519f75d1f763f6ff0

  • SHA1

    1719fe2b6b96fffca1bab8938b512a4f279abf29

  • SHA256

    50fd0fab483003df125a95251ce74a8039dd4f2b6675d8b25a4e7c016411a761

  • SHA512

    fa0461bce9923c37c9f2c4884f12c7cc8b501f55a9eac136ec256d309c68951bad94dde19b3a48ae474d7409d2c5930a071d25f7c10da3588c2486e2cae18d81

  • SSDEEP

    6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      50fd0fab483003df125a95251ce74a8039dd4f2b6675d8b25a4e7c016411a761

    • Size

      383KB

    • MD5

      88d329cb8ad5a95519f75d1f763f6ff0

    • SHA1

      1719fe2b6b96fffca1bab8938b512a4f279abf29

    • SHA256

      50fd0fab483003df125a95251ce74a8039dd4f2b6675d8b25a4e7c016411a761

    • SHA512

      fa0461bce9923c37c9f2c4884f12c7cc8b501f55a9eac136ec256d309c68951bad94dde19b3a48ae474d7409d2c5930a071d25f7c10da3588c2486e2cae18d81

    • SSDEEP

      6144:ANaJ3TPjifAJdT1HhGB35wOx6irIvIG6PDdmXb7ITsqXigaXwVfZ:+eTbMAJdxsXx6Dv4dk7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks