General

  • Target

    f265c7bc15e8be993fbaee43f28c81716daf084234773c35a2f43777fa237bc2

  • Size

    297KB

  • Sample

    241108-sc3nqavaqk

  • MD5

    d801a44fc5f49b6b9b4e6ce63d093ba2

  • SHA1

    dc8d87ea28f247ccb1c1d135093a86b463e9793d

  • SHA256

    f265c7bc15e8be993fbaee43f28c81716daf084234773c35a2f43777fa237bc2

  • SHA512

    02fa453ac5dfe5ef5b66204318527c35a1693967bd565d19c5eebd8f00b5d330a57783036ba9cb94c8f1e294155e0a5813f1a2ebc397d45018324fe6e5a40b83

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      f265c7bc15e8be993fbaee43f28c81716daf084234773c35a2f43777fa237bc2

    • Size

      297KB

    • MD5

      d801a44fc5f49b6b9b4e6ce63d093ba2

    • SHA1

      dc8d87ea28f247ccb1c1d135093a86b463e9793d

    • SHA256

      f265c7bc15e8be993fbaee43f28c81716daf084234773c35a2f43777fa237bc2

    • SHA512

      02fa453ac5dfe5ef5b66204318527c35a1693967bd565d19c5eebd8f00b5d330a57783036ba9cb94c8f1e294155e0a5813f1a2ebc397d45018324fe6e5a40b83

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks