General

  • Target

    10f16b367551f8796a158c5768992ce1a746488a6e2d9b52aaf1e47c782be775

  • Size

    438KB

  • Sample

    241110-lv46yavcrb

  • MD5

    3bf10510dc297938c10a8d758a9b98a7

  • SHA1

    a558798d2e8fda4a140e67f941d205ff75b73ee7

  • SHA256

    10f16b367551f8796a158c5768992ce1a746488a6e2d9b52aaf1e47c782be775

  • SHA512

    48968e75f06e90609a94673ff9aca46161a21382489d09cae4fff27ff6b1c3ecb8308c5c0c3184f7db10ee36e781d016ddc8ce0c23931fa6b297e0d689dbf34a

  • SSDEEP

    12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      10f16b367551f8796a158c5768992ce1a746488a6e2d9b52aaf1e47c782be775

    • Size

      438KB

    • MD5

      3bf10510dc297938c10a8d758a9b98a7

    • SHA1

      a558798d2e8fda4a140e67f941d205ff75b73ee7

    • SHA256

      10f16b367551f8796a158c5768992ce1a746488a6e2d9b52aaf1e47c782be775

    • SHA512

      48968e75f06e90609a94673ff9aca46161a21382489d09cae4fff27ff6b1c3ecb8308c5c0c3184f7db10ee36e781d016ddc8ce0c23931fa6b297e0d689dbf34a

    • SSDEEP

      12288:4YhchiYJX9unlW7RSRjAH3i5nHxAfSLA+dQH0xP4:4Yh5w9ul2qLAHU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks