General

  • Target

    7981b2feb276963778ec3a83d82b4d089f9635496dd2c55b342320b7b5d8a09d

  • Size

    428KB

  • Sample

    241109-jgfkbazhng

  • MD5

    29ddfad645f11977724fce8db17e25b9

  • SHA1

    9a219c509bee691a4f635dbd991785e6ab3d5ff6

  • SHA256

    7981b2feb276963778ec3a83d82b4d089f9635496dd2c55b342320b7b5d8a09d

  • SHA512

    f725f4d7e1fb6388fce55bf3754594a75132a9642b87e945bce406ed2de5244d1ef99917cc801789c0ae38a418b6c1a5ca0a42922847887cc88ba081ec76b3d5

  • SSDEEP

    6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      7981b2feb276963778ec3a83d82b4d089f9635496dd2c55b342320b7b5d8a09d

    • Size

      428KB

    • MD5

      29ddfad645f11977724fce8db17e25b9

    • SHA1

      9a219c509bee691a4f635dbd991785e6ab3d5ff6

    • SHA256

      7981b2feb276963778ec3a83d82b4d089f9635496dd2c55b342320b7b5d8a09d

    • SHA512

      f725f4d7e1fb6388fce55bf3754594a75132a9642b87e945bce406ed2de5244d1ef99917cc801789c0ae38a418b6c1a5ca0a42922847887cc88ba081ec76b3d5

    • SSDEEP

      6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks