General

  • Target

    78c3eb36695cfea4ba37e7417e510ac144f28009475dda59cc0aebad335b9aa3

  • Size

    297KB

  • Sample

    241108-lqzewszgqa

  • MD5

    7c7c0fbd380f9b983a5590c0a357f944

  • SHA1

    d141f7dc4837d7d9d6dd954efef5a5eb16c9cf71

  • SHA256

    78c3eb36695cfea4ba37e7417e510ac144f28009475dda59cc0aebad335b9aa3

  • SHA512

    7ba5a20a3fa747868eabcf80f71f9dd5210090fcad22bf87bee4bd1307a063bd0ef7b5b7eef5c92eceb4b1880acb69b2f41521251c449879be547eb1f20d5133

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      78c3eb36695cfea4ba37e7417e510ac144f28009475dda59cc0aebad335b9aa3

    • Size

      297KB

    • MD5

      7c7c0fbd380f9b983a5590c0a357f944

    • SHA1

      d141f7dc4837d7d9d6dd954efef5a5eb16c9cf71

    • SHA256

      78c3eb36695cfea4ba37e7417e510ac144f28009475dda59cc0aebad335b9aa3

    • SHA512

      7ba5a20a3fa747868eabcf80f71f9dd5210090fcad22bf87bee4bd1307a063bd0ef7b5b7eef5c92eceb4b1880acb69b2f41521251c449879be547eb1f20d5133

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks