General

  • Target

    418c946c0dd8cfb62ad9d7a15a37f7dfcfec6dcdc72e468bb629fd25f60cdb55

  • Size

    298KB

  • Sample

    241110-h6kd5avqcn

  • MD5

    de34a93181ead25e0495f3ea3aee16a2

  • SHA1

    5aba9f0aa9731f98306d198d13aa3aef7a94bd46

  • SHA256

    418c946c0dd8cfb62ad9d7a15a37f7dfcfec6dcdc72e468bb629fd25f60cdb55

  • SHA512

    a0655e56cb5713ef6694e21ce152a3383063b5b3c497e4d337d535f0ba0816a2209c6784ae4f186e8c1c3a816a898b0fa5226ffc252456a53ca91e80c6426289

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      418c946c0dd8cfb62ad9d7a15a37f7dfcfec6dcdc72e468bb629fd25f60cdb55

    • Size

      298KB

    • MD5

      de34a93181ead25e0495f3ea3aee16a2

    • SHA1

      5aba9f0aa9731f98306d198d13aa3aef7a94bd46

    • SHA256

      418c946c0dd8cfb62ad9d7a15a37f7dfcfec6dcdc72e468bb629fd25f60cdb55

    • SHA512

      a0655e56cb5713ef6694e21ce152a3383063b5b3c497e4d337d535f0ba0816a2209c6784ae4f186e8c1c3a816a898b0fa5226ffc252456a53ca91e80c6426289

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks