General

  • Target

    84f8c6928f802334c094155f88a3436a0dce689b2626b353b46d34fbbd2fa52e

  • Size

    297KB

  • Sample

    241108-ew441axqej

  • MD5

    44b341ce7c0ddaec3578f9181dccf05a

  • SHA1

    a6ca8a5d1e5d7ad641acee3fd8a9101f2c35433c

  • SHA256

    84f8c6928f802334c094155f88a3436a0dce689b2626b353b46d34fbbd2fa52e

  • SHA512

    46ffb4ecf7cf57b3e04a0ba08831063f8fcc2201fb75080b71ebe582b1c31d87e42b0c81cb5108731f83c2e0a5e06aa3696033754a6f6692aac71acc2785968a

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      84f8c6928f802334c094155f88a3436a0dce689b2626b353b46d34fbbd2fa52e

    • Size

      297KB

    • MD5

      44b341ce7c0ddaec3578f9181dccf05a

    • SHA1

      a6ca8a5d1e5d7ad641acee3fd8a9101f2c35433c

    • SHA256

      84f8c6928f802334c094155f88a3436a0dce689b2626b353b46d34fbbd2fa52e

    • SHA512

      46ffb4ecf7cf57b3e04a0ba08831063f8fcc2201fb75080b71ebe582b1c31d87e42b0c81cb5108731f83c2e0a5e06aa3696033754a6f6692aac71acc2785968a

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks