General

  • Target

    08023d68844495fb05f9c96ec57c60ab168a80c0d5bed3c1728d658b68d9363b

  • Size

    297KB

  • Sample

    241111-epkf1s1ra1

  • MD5

    ce290e345b62dfdebeb04b75077ea4b7

  • SHA1

    e5e9cdf54f2c6a03f90497abd58c5b3c9860c2d1

  • SHA256

    08023d68844495fb05f9c96ec57c60ab168a80c0d5bed3c1728d658b68d9363b

  • SHA512

    9a745583354557494e8de8f3d3c5002d074ef39cbd76d1b096015e10eaa3ff5e1436faed90d870bf3082156e129067a20c630634d8c6680c788b7284fd936879

  • SSDEEP

    6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      08023d68844495fb05f9c96ec57c60ab168a80c0d5bed3c1728d658b68d9363b

    • Size

      297KB

    • MD5

      ce290e345b62dfdebeb04b75077ea4b7

    • SHA1

      e5e9cdf54f2c6a03f90497abd58c5b3c9860c2d1

    • SHA256

      08023d68844495fb05f9c96ec57c60ab168a80c0d5bed3c1728d658b68d9363b

    • SHA512

      9a745583354557494e8de8f3d3c5002d074ef39cbd76d1b096015e10eaa3ff5e1436faed90d870bf3082156e129067a20c630634d8c6680c788b7284fd936879

    • SSDEEP

      6144:bHX+iXvoPGKN3MYAXcK6YWo2mYLVe2PRy6u802JJs:b3+iXvoPoYISTLVHZy6zJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks