General

  • Target

    ceae0d981d233d65f3a09302814c1fbdf04d0ad92edc7661602160fad5b7ec86

  • Size

    297KB

  • Sample

    241109-xz16mazhpm

  • MD5

    22d33f6127364d523ccc6fee0c2525c8

  • SHA1

    dfa485f1429b2296975f4cc813dab07f9f90bd88

  • SHA256

    ceae0d981d233d65f3a09302814c1fbdf04d0ad92edc7661602160fad5b7ec86

  • SHA512

    c73282a51bd0d2c3973f375c97113b1a647a7e14e5f8824e02b0d0359eabb0fe0aefebbb8194b233bc719a4546c1726fdfa35e6fcad31a4148cebd8ea08a79ef

  • SSDEEP

    6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      ceae0d981d233d65f3a09302814c1fbdf04d0ad92edc7661602160fad5b7ec86

    • Size

      297KB

    • MD5

      22d33f6127364d523ccc6fee0c2525c8

    • SHA1

      dfa485f1429b2296975f4cc813dab07f9f90bd88

    • SHA256

      ceae0d981d233d65f3a09302814c1fbdf04d0ad92edc7661602160fad5b7ec86

    • SHA512

      c73282a51bd0d2c3973f375c97113b1a647a7e14e5f8824e02b0d0359eabb0fe0aefebbb8194b233bc719a4546c1726fdfa35e6fcad31a4148cebd8ea08a79ef

    • SSDEEP

      6144:rvHwCMbovQJ2lzmGk2l3u7ZOuc50Cb/7rRSUbHMfG4:rPwCMbovQJ6N3u7ZeR/7Ce

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks