General

  • Target

    e52b030b391ebd2d7df5e5083a5c01a8f2808304108151f22a79be465c2bc0ee

  • Size

    423KB

  • Sample

    241108-1q1qaazlhy

  • MD5

    a9d954cb5e48777a83d4bc26cab0bfc6

  • SHA1

    416ee601014a4a67d6c0c034f69675b64411195f

  • SHA256

    e52b030b391ebd2d7df5e5083a5c01a8f2808304108151f22a79be465c2bc0ee

  • SHA512

    48f975876a9ad4886e6068659b9880f93f992586e0d1b200df83acd9e42a06066b09290e716cad091322a8f1b53286f899c1a261168dbc238fad6b3ae2124d23

  • SSDEEP

    6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      e52b030b391ebd2d7df5e5083a5c01a8f2808304108151f22a79be465c2bc0ee

    • Size

      423KB

    • MD5

      a9d954cb5e48777a83d4bc26cab0bfc6

    • SHA1

      416ee601014a4a67d6c0c034f69675b64411195f

    • SHA256

      e52b030b391ebd2d7df5e5083a5c01a8f2808304108151f22a79be465c2bc0ee

    • SHA512

      48f975876a9ad4886e6068659b9880f93f992586e0d1b200df83acd9e42a06066b09290e716cad091322a8f1b53286f899c1a261168dbc238fad6b3ae2124d23

    • SSDEEP

      6144:lF0QwcHpDxNC/vcfL4r/7Rvyx2BOxZWpWmYgwzOdrePY5hfm:lG0xEiErD1YNxZWpWmYwdreP5

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks