General

  • Target

    7b05982a2668e1b01077cc1850a28f624ec5d7faa07a1f3af47619054a8dece5

  • Size

    297KB

  • Sample

    241108-dsrttsthlb

  • MD5

    df705a456cc1303485f691cad6842424

  • SHA1

    63282d5af7953cb8e535ae366fa8a839b6ea86c7

  • SHA256

    7b05982a2668e1b01077cc1850a28f624ec5d7faa07a1f3af47619054a8dece5

  • SHA512

    5c755dfacdc13513c208267c4c39c2b6caf8365f0f2b67580ffebf7e00633fc634e1c59e5eec253399938ad16084097a44bb36119103adc0ca1d5c8449751998

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      7b05982a2668e1b01077cc1850a28f624ec5d7faa07a1f3af47619054a8dece5

    • Size

      297KB

    • MD5

      df705a456cc1303485f691cad6842424

    • SHA1

      63282d5af7953cb8e535ae366fa8a839b6ea86c7

    • SHA256

      7b05982a2668e1b01077cc1850a28f624ec5d7faa07a1f3af47619054a8dece5

    • SHA512

      5c755dfacdc13513c208267c4c39c2b6caf8365f0f2b67580ffebf7e00633fc634e1c59e5eec253399938ad16084097a44bb36119103adc0ca1d5c8449751998

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks