General

  • Target

    6719db7cb55982c89c8895225d9b30a7756d0ee9cf792c9de29863ff273746c8

  • Size

    298KB

  • Sample

    241110-ehlqhaymcy

  • MD5

    13f5119acfdf4812a120e07baf3ea8ec

  • SHA1

    e6d62e7a90d6aa06fa878fd9aa254bd40cf879d2

  • SHA256

    6719db7cb55982c89c8895225d9b30a7756d0ee9cf792c9de29863ff273746c8

  • SHA512

    8d0e2bf595c80fd85edb74d7aee7c8ff3ea1a81ceece615271707dc0a5c6d7caf5281953932ac69050eb02fd3b6cbd114a5cde91fc7316ba99640a16050312c8

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      6719db7cb55982c89c8895225d9b30a7756d0ee9cf792c9de29863ff273746c8

    • Size

      298KB

    • MD5

      13f5119acfdf4812a120e07baf3ea8ec

    • SHA1

      e6d62e7a90d6aa06fa878fd9aa254bd40cf879d2

    • SHA256

      6719db7cb55982c89c8895225d9b30a7756d0ee9cf792c9de29863ff273746c8

    • SHA512

      8d0e2bf595c80fd85edb74d7aee7c8ff3ea1a81ceece615271707dc0a5c6d7caf5281953932ac69050eb02fd3b6cbd114a5cde91fc7316ba99640a16050312c8

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks