General

  • Target

    0f386eb07047cf98e83040918c035ec4eabe61aaf0248984dc9af2fc86b8c43c

  • Size

    297KB

  • Sample

    241108-h5sn4sxlgx

  • MD5

    ba864e5601f28c7b42de441886294d04

  • SHA1

    6420186d4dc58653fc726c34cf9ddb75a351557c

  • SHA256

    0f386eb07047cf98e83040918c035ec4eabe61aaf0248984dc9af2fc86b8c43c

  • SHA512

    f509915199916e0f4bb648b7439056ca22eba385f107125c662f4c84e3bf3af78f64c426ee24087b6e73158cd9be8df1ed94f7277d768ba47754d1e633fbc657

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      0f386eb07047cf98e83040918c035ec4eabe61aaf0248984dc9af2fc86b8c43c

    • Size

      297KB

    • MD5

      ba864e5601f28c7b42de441886294d04

    • SHA1

      6420186d4dc58653fc726c34cf9ddb75a351557c

    • SHA256

      0f386eb07047cf98e83040918c035ec4eabe61aaf0248984dc9af2fc86b8c43c

    • SHA512

      f509915199916e0f4bb648b7439056ca22eba385f107125c662f4c84e3bf3af78f64c426ee24087b6e73158cd9be8df1ed94f7277d768ba47754d1e633fbc657

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks