General

  • Target

    5cb604ad9ad374e471d3aac68e616b891e68140657d601ce81a16617657e9cdb

  • Size

    442KB

  • Sample

    241108-1h7tmazket

  • MD5

    c7881d8ae52d7b084649261336b10c09

  • SHA1

    627509bce9ee95db909af6c30613651afbd94236

  • SHA256

    5cb604ad9ad374e471d3aac68e616b891e68140657d601ce81a16617657e9cdb

  • SHA512

    0bdee0dda63a9a43d768d59c131484b5775eac756b5ee4eb85430e8daa8f2715d3f56049d98fd362b3d1ad8e47a5ead3f94ada4c671c5051870545729e5ab5f5

  • SSDEEP

    6144:TmdckoOVAQwglvkNo1cThqGhCV3YDd+DG0XYPfbW7yV1O7TC/d:TmScV4VNo1cTNha3YDd+DG0XYa701Ov

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      5cb604ad9ad374e471d3aac68e616b891e68140657d601ce81a16617657e9cdb

    • Size

      442KB

    • MD5

      c7881d8ae52d7b084649261336b10c09

    • SHA1

      627509bce9ee95db909af6c30613651afbd94236

    • SHA256

      5cb604ad9ad374e471d3aac68e616b891e68140657d601ce81a16617657e9cdb

    • SHA512

      0bdee0dda63a9a43d768d59c131484b5775eac756b5ee4eb85430e8daa8f2715d3f56049d98fd362b3d1ad8e47a5ead3f94ada4c671c5051870545729e5ab5f5

    • SSDEEP

      6144:TmdckoOVAQwglvkNo1cThqGhCV3YDd+DG0XYPfbW7yV1O7TC/d:TmScV4VNo1cTNha3YDd+DG0XYa701Ov

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks