General

  • Target

    f0eb7bc7e0c301cbd795e190e90f2646b785b1ad26e05dd0b7f633f408954540

  • Size

    410KB

  • Sample

    241111-c14mxs1apl

  • MD5

    a8325caa29719bb2ad6524c1a263e846

  • SHA1

    308cc3f6f287e31c1a1003dbd9211247000365d9

  • SHA256

    f0eb7bc7e0c301cbd795e190e90f2646b785b1ad26e05dd0b7f633f408954540

  • SHA512

    11c26e1e406c8d25bbf7a520b1c02a11b81c6ef8db6cfa8e5dffbfaee78f4654d4db4af8f7f1ae45c55cc68340938395b61e4433fdfbd6b1a6262396f4214f69

  • SSDEEP

    6144:xe7JNLtZXhjwNjndQBvVDFcK5ykXWxpyk11EcQx06SnBz:oJNLFwhd4VDFrykXWxpyKEcQx07B

Malware Config

Extracted

Family

redline

Botnet

170

C2

45.9.20.240:46257

Attributes
  • auth_value

    73f905977a8199ea3d396a0a7d0ae6c8

Targets

    • Target

      f0eb7bc7e0c301cbd795e190e90f2646b785b1ad26e05dd0b7f633f408954540

    • Size

      410KB

    • MD5

      a8325caa29719bb2ad6524c1a263e846

    • SHA1

      308cc3f6f287e31c1a1003dbd9211247000365d9

    • SHA256

      f0eb7bc7e0c301cbd795e190e90f2646b785b1ad26e05dd0b7f633f408954540

    • SHA512

      11c26e1e406c8d25bbf7a520b1c02a11b81c6ef8db6cfa8e5dffbfaee78f4654d4db4af8f7f1ae45c55cc68340938395b61e4433fdfbd6b1a6262396f4214f69

    • SSDEEP

      6144:xe7JNLtZXhjwNjndQBvVDFcK5ykXWxpyk11EcQx06SnBz:oJNLFwhd4VDFrykXWxpyKEcQx07B

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks