General

  • Target

    8e87c7e40d5ff8c7a77df8eaeadb9e703aa7bda45a07ba54573ac9db79258a76

  • Size

    297KB

  • Sample

    241108-25l14s1mdx

  • MD5

    c24a9a97fe43541444f61aa3f6a9a5b1

  • SHA1

    136d980e562e9b35eb5f2ac4817c12b900c35025

  • SHA256

    8e87c7e40d5ff8c7a77df8eaeadb9e703aa7bda45a07ba54573ac9db79258a76

  • SHA512

    3351924f15d803209d48f3d7dc189f6f988803624f5ca32b4867528dbb3cbf6a88b5942e06d44b8b82804bef8a14fc3df7111969aa149d1d5300e3d321dc59d4

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      8e87c7e40d5ff8c7a77df8eaeadb9e703aa7bda45a07ba54573ac9db79258a76

    • Size

      297KB

    • MD5

      c24a9a97fe43541444f61aa3f6a9a5b1

    • SHA1

      136d980e562e9b35eb5f2ac4817c12b900c35025

    • SHA256

      8e87c7e40d5ff8c7a77df8eaeadb9e703aa7bda45a07ba54573ac9db79258a76

    • SHA512

      3351924f15d803209d48f3d7dc189f6f988803624f5ca32b4867528dbb3cbf6a88b5942e06d44b8b82804bef8a14fc3df7111969aa149d1d5300e3d321dc59d4

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks