General

  • Target

    22df56f547b9d2bbdc3ee7aab843aeb5aea0df541becca1a05c5ac66d8a9a48f

  • Size

    297KB

  • Sample

    241107-p5214ssfjh

  • MD5

    007398058789d4882ab2e2cb834d1ec5

  • SHA1

    73fa01b96c91e63463643840ca6c8d7f1817fb81

  • SHA256

    22df56f547b9d2bbdc3ee7aab843aeb5aea0df541becca1a05c5ac66d8a9a48f

  • SHA512

    495f39ad8acb1aabbf809bf1de42af91acbc9d6a9792ad828da8f67f934904f8c8634d5de14baf09798ce5e1a9a17201e7aa16cf410e1867e275f31e0301a4cf

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      22df56f547b9d2bbdc3ee7aab843aeb5aea0df541becca1a05c5ac66d8a9a48f

    • Size

      297KB

    • MD5

      007398058789d4882ab2e2cb834d1ec5

    • SHA1

      73fa01b96c91e63463643840ca6c8d7f1817fb81

    • SHA256

      22df56f547b9d2bbdc3ee7aab843aeb5aea0df541becca1a05c5ac66d8a9a48f

    • SHA512

      495f39ad8acb1aabbf809bf1de42af91acbc9d6a9792ad828da8f67f934904f8c8634d5de14baf09798ce5e1a9a17201e7aa16cf410e1867e275f31e0301a4cf

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks