General

  • Target

    45dcc8fdcf6a18e3895bae62396fa74c69793b2094bc301cda2c2aa53763cb35

  • Size

    346KB

  • Sample

    241108-3dp45ascld

  • MD5

    e12e5ae81acdaa43dd8cf96d3ecbd8d2

  • SHA1

    c4464c93248eacc1059451b416b61d0a57f0d163

  • SHA256

    45dcc8fdcf6a18e3895bae62396fa74c69793b2094bc301cda2c2aa53763cb35

  • SHA512

    e3f48ea1e33fe71a89e309e55686d366c14ec7c9df577ef15c4d633de9eb536199c5c7e477a9a79d6685e28481a13a579c6e1e82876edc3887365184cd967cfc

  • SSDEEP

    6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      45dcc8fdcf6a18e3895bae62396fa74c69793b2094bc301cda2c2aa53763cb35

    • Size

      346KB

    • MD5

      e12e5ae81acdaa43dd8cf96d3ecbd8d2

    • SHA1

      c4464c93248eacc1059451b416b61d0a57f0d163

    • SHA256

      45dcc8fdcf6a18e3895bae62396fa74c69793b2094bc301cda2c2aa53763cb35

    • SHA512

      e3f48ea1e33fe71a89e309e55686d366c14ec7c9df577ef15c4d633de9eb536199c5c7e477a9a79d6685e28481a13a579c6e1e82876edc3887365184cd967cfc

    • SSDEEP

      6144:6H2yHHfy3TH0WvNHC9PfNwB+Mqb7ITsqXigaa:6H2yHHfiTWPFwoMq7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks