General

  • Target

    4d613deebc9f4b7195e0150e24a7e298b57ebf3af797246235fe71ab851ed2d0

  • Size

    297KB

  • Sample

    241111-cfpchazdrr

  • MD5

    b6ef61f827df197e80615be26e5b4dd1

  • SHA1

    00d73792cb01f5761eeebaf4e75f9cff4e7dbf87

  • SHA256

    4d613deebc9f4b7195e0150e24a7e298b57ebf3af797246235fe71ab851ed2d0

  • SHA512

    dbe797773d719bb9780cdf0ccaf40db5e7b5fa2e7062ac8dca311003980666e5889c4e3d63932aeb5330c77ed31a41cbeda7596e2bf62c8b1943d17ce0eaabb3

  • SSDEEP

    6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      4d613deebc9f4b7195e0150e24a7e298b57ebf3af797246235fe71ab851ed2d0

    • Size

      297KB

    • MD5

      b6ef61f827df197e80615be26e5b4dd1

    • SHA1

      00d73792cb01f5761eeebaf4e75f9cff4e7dbf87

    • SHA256

      4d613deebc9f4b7195e0150e24a7e298b57ebf3af797246235fe71ab851ed2d0

    • SHA512

      dbe797773d719bb9780cdf0ccaf40db5e7b5fa2e7062ac8dca311003980666e5889c4e3d63932aeb5330c77ed31a41cbeda7596e2bf62c8b1943d17ce0eaabb3

    • SSDEEP

      6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks