General

  • Target

    957b85238faeb772a76bfbb0928f5acdcf2558256b3cb01a4f9e8a82ac01d693

  • Size

    298KB

  • Sample

    241110-3hdlwsxdmm

  • MD5

    97a5d890bf3248e543bd04693bbe24b9

  • SHA1

    c750f83518341fc8a7a502db41edd8bac91622ac

  • SHA256

    957b85238faeb772a76bfbb0928f5acdcf2558256b3cb01a4f9e8a82ac01d693

  • SHA512

    423c47d831398d3a8cf229675b6d4fd649f8c2dedaef3505951e3da91b9ad9d07a9527900a3cec864ba4ff38622e705c4d1544788704d84ee559da1eecb94380

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      957b85238faeb772a76bfbb0928f5acdcf2558256b3cb01a4f9e8a82ac01d693

    • Size

      298KB

    • MD5

      97a5d890bf3248e543bd04693bbe24b9

    • SHA1

      c750f83518341fc8a7a502db41edd8bac91622ac

    • SHA256

      957b85238faeb772a76bfbb0928f5acdcf2558256b3cb01a4f9e8a82ac01d693

    • SHA512

      423c47d831398d3a8cf229675b6d4fd649f8c2dedaef3505951e3da91b9ad9d07a9527900a3cec864ba4ff38622e705c4d1544788704d84ee559da1eecb94380

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks