General

  • Target

    d51f5dbb143609666d2d5983a45e40f9c8d7c7cf6094623dd025e331874dc04c

  • Size

    297KB

  • Sample

    241107-pmhjra1paz

  • MD5

    c7e2bd33b954cd4c5ad35ac02cb78cd0

  • SHA1

    bf91a5b92c7f0f6d30043d52ea0afaf619498163

  • SHA256

    d51f5dbb143609666d2d5983a45e40f9c8d7c7cf6094623dd025e331874dc04c

  • SHA512

    6c3a879ae67605222da2411f35510d734270b17ff8151441ef6cb3926944aaae2bf51992a025e06d05c44355d3d358db861eee2a549da415c7b8bc4ef95557de

  • SSDEEP

    6144:bvzGiXPoPRvZzhR9WEjQJIud9k70st5J0c8f0wPIQJ:bLGiXPoPRxYEjQJIudS0SJ0c8f0wP

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      d51f5dbb143609666d2d5983a45e40f9c8d7c7cf6094623dd025e331874dc04c

    • Size

      297KB

    • MD5

      c7e2bd33b954cd4c5ad35ac02cb78cd0

    • SHA1

      bf91a5b92c7f0f6d30043d52ea0afaf619498163

    • SHA256

      d51f5dbb143609666d2d5983a45e40f9c8d7c7cf6094623dd025e331874dc04c

    • SHA512

      6c3a879ae67605222da2411f35510d734270b17ff8151441ef6cb3926944aaae2bf51992a025e06d05c44355d3d358db861eee2a549da415c7b8bc4ef95557de

    • SSDEEP

      6144:bvzGiXPoPRvZzhR9WEjQJIud9k70st5J0c8f0wPIQJ:bLGiXPoPRxYEjQJIudS0SJ0c8f0wP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks