General

  • Target

    35acfa9252621009294725f2192ebefb7f5c34244877f96c9ccc8be3ba33af27

  • Size

    396KB

  • Sample

    241111-cmerms1anb

  • MD5

    737a994f43d824dbc517a25875d6ab1d

  • SHA1

    f7bab8f322412a2e57b19bb5ef32f5b211ce53d1

  • SHA256

    35acfa9252621009294725f2192ebefb7f5c34244877f96c9ccc8be3ba33af27

  • SHA512

    3323bca88460613e9f44dd84dce4788381136a151ce3a0f012544095d3cb25d586302fbac0ae250193a3e97d605a2492b9bba01a8b3c3b91718f0e13090807ff

  • SSDEEP

    6144:cqUqkPy8qSS3kYzWdD5A9PT6PAepsXWcmfbiPLEX2VnAys:cqRdUNG6PAepsXkbLX8

Malware Config

Extracted

Family

redline

C2

62.204.41.84:42650

Attributes
  • auth_value

    1ef48284b6cf9977d892094e87a9f046

Targets

    • Target

      35acfa9252621009294725f2192ebefb7f5c34244877f96c9ccc8be3ba33af27

    • Size

      396KB

    • MD5

      737a994f43d824dbc517a25875d6ab1d

    • SHA1

      f7bab8f322412a2e57b19bb5ef32f5b211ce53d1

    • SHA256

      35acfa9252621009294725f2192ebefb7f5c34244877f96c9ccc8be3ba33af27

    • SHA512

      3323bca88460613e9f44dd84dce4788381136a151ce3a0f012544095d3cb25d586302fbac0ae250193a3e97d605a2492b9bba01a8b3c3b91718f0e13090807ff

    • SSDEEP

      6144:cqUqkPy8qSS3kYzWdD5A9PT6PAepsXWcmfbiPLEX2VnAys:cqRdUNG6PAepsXkbLX8

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks