General

  • Target

    cd7b7153e17596448554b37115c4101db4033dc7a46b53fa2b22209b3bec7751

  • Size

    438KB

  • Sample

    241109-y1hlca1fjp

  • MD5

    8d6162cc463f0e9fd1351a904bb852e3

  • SHA1

    72b5eefafc0ce4518b0ea6caa1afd3c58425710d

  • SHA256

    cd7b7153e17596448554b37115c4101db4033dc7a46b53fa2b22209b3bec7751

  • SHA512

    bb50f202276c36011113d619613d750260520d5f35adaa75089b50f1537f5f3a5cd5634cf49dc482fe4864a283ebec4ffcbeaffaf066f9d42426c7c379f811ca

  • SSDEEP

    12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      cd7b7153e17596448554b37115c4101db4033dc7a46b53fa2b22209b3bec7751

    • Size

      438KB

    • MD5

      8d6162cc463f0e9fd1351a904bb852e3

    • SHA1

      72b5eefafc0ce4518b0ea6caa1afd3c58425710d

    • SHA256

      cd7b7153e17596448554b37115c4101db4033dc7a46b53fa2b22209b3bec7751

    • SHA512

      bb50f202276c36011113d619613d750260520d5f35adaa75089b50f1537f5f3a5cd5634cf49dc482fe4864a283ebec4ffcbeaffaf066f9d42426c7c379f811ca

    • SSDEEP

      12288:NEqMZp5yIZX2efc4zNUGgxPpTRSRjAHfi5nHTkoPASPQfo/t:R6pYMf5x7GoPAJQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks