General

  • Target

    ef4ae58d927f81aa1ec409f1b70ade9f15719a508da4e47a15ff58cf9ac444d9

  • Size

    428KB

  • Sample

    241110-ertgpssmdn

  • MD5

    415eddd14dde947bd844ca695da4261b

  • SHA1

    d49279e4f4a8901f60504ef38cebcc1977355a66

  • SHA256

    ef4ae58d927f81aa1ec409f1b70ade9f15719a508da4e47a15ff58cf9ac444d9

  • SHA512

    36bcb983dc4e6aaaa4f96ba0747ba6f53d8b8bac72de3ef2fc08d53f7de28a0826f96d1f05e4e3ba799265733310b03b61bcf75801e71a70bc1160bb2bc16d0b

  • SSDEEP

    6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      ef4ae58d927f81aa1ec409f1b70ade9f15719a508da4e47a15ff58cf9ac444d9

    • Size

      428KB

    • MD5

      415eddd14dde947bd844ca695da4261b

    • SHA1

      d49279e4f4a8901f60504ef38cebcc1977355a66

    • SHA256

      ef4ae58d927f81aa1ec409f1b70ade9f15719a508da4e47a15ff58cf9ac444d9

    • SHA512

      36bcb983dc4e6aaaa4f96ba0747ba6f53d8b8bac72de3ef2fc08d53f7de28a0826f96d1f05e4e3ba799265733310b03b61bcf75801e71a70bc1160bb2bc16d0b

    • SSDEEP

      6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks