General

  • Target

    8e4754f93988904fe5dfb2ee45719f7d7c5be7493f89520c28e7219f91b77fb8

  • Size

    371KB

  • Sample

    241108-yf249a1kgk

  • MD5

    6ea60c835a7a8b2268d14ea062d12798

  • SHA1

    24ef608f673f4d33d9c8def08df49fe5a22ffb40

  • SHA256

    8e4754f93988904fe5dfb2ee45719f7d7c5be7493f89520c28e7219f91b77fb8

  • SHA512

    4be5628aff8b27c31c0648084f493c8fa84bfabedbb3ebba2e1638ec6436b9d947f8db77b98398530aae8e944f577e2e2a3187db7814e2b0d30e3701280e694c

  • SSDEEP

    6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      8e4754f93988904fe5dfb2ee45719f7d7c5be7493f89520c28e7219f91b77fb8

    • Size

      371KB

    • MD5

      6ea60c835a7a8b2268d14ea062d12798

    • SHA1

      24ef608f673f4d33d9c8def08df49fe5a22ffb40

    • SHA256

      8e4754f93988904fe5dfb2ee45719f7d7c5be7493f89520c28e7219f91b77fb8

    • SHA512

      4be5628aff8b27c31c0648084f493c8fa84bfabedbb3ebba2e1638ec6436b9d947f8db77b98398530aae8e944f577e2e2a3187db7814e2b0d30e3701280e694c

    • SSDEEP

      6144:OrQh7mH2qa6nCwx1nzk/daKaihR1osZ/8/UQ51C/b7ITsqXigaXwVfZ:OrQh7mH2p6nCI1nw6cR1OUQmj7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks