General

  • Target

    519c67413c2fff2cfeb48563819fa83784471ebf95d04beade58dff718a2aec9

  • Size

    298KB

  • Sample

    241109-xelv7syqay

  • MD5

    16dabe01144d718de1eb044569523b85

  • SHA1

    10834eb12e0d8a718f4805dcbc1b2b694b74cda1

  • SHA256

    519c67413c2fff2cfeb48563819fa83784471ebf95d04beade58dff718a2aec9

  • SHA512

    bf65005374ea7af7546afd4c5846c4ee2e3deb7ce7ef3435e15a6278e0b3e440013a577685c1358cbbc57f47bb7661350b34370bc305a0f2df99fcb5bfe5a5ab

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      519c67413c2fff2cfeb48563819fa83784471ebf95d04beade58dff718a2aec9

    • Size

      298KB

    • MD5

      16dabe01144d718de1eb044569523b85

    • SHA1

      10834eb12e0d8a718f4805dcbc1b2b694b74cda1

    • SHA256

      519c67413c2fff2cfeb48563819fa83784471ebf95d04beade58dff718a2aec9

    • SHA512

      bf65005374ea7af7546afd4c5846c4ee2e3deb7ce7ef3435e15a6278e0b3e440013a577685c1358cbbc57f47bb7661350b34370bc305a0f2df99fcb5bfe5a5ab

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks