General

  • Target

    850a865793337ba9e00adc136ff233a8f4819dd72bcacbc220e2a0b9c3caa1ac

  • Size

    371KB

  • Sample

    241111-ezkjrssjg1

  • MD5

    6301109a853bce14a96aeb61ebb48bbd

  • SHA1

    7ddf629097e440b6a1a8168c853851bdbaefd4fe

  • SHA256

    850a865793337ba9e00adc136ff233a8f4819dd72bcacbc220e2a0b9c3caa1ac

  • SHA512

    3dc188103443a3d2ce02a920e8364a735f5000c46d43fae7b6d36077d6f5912ea463633aabcb4bbc0f9798a47b3a6af92d3651ab840e54a6110a6b34e17f308b

  • SSDEEP

    6144:OCXITG+urF+W2/cH8J6yr/bAxgPLrk1sx5b7ITsqXigaXwVfZ:OCXITDDWmx6BOj8O17R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      850a865793337ba9e00adc136ff233a8f4819dd72bcacbc220e2a0b9c3caa1ac

    • Size

      371KB

    • MD5

      6301109a853bce14a96aeb61ebb48bbd

    • SHA1

      7ddf629097e440b6a1a8168c853851bdbaefd4fe

    • SHA256

      850a865793337ba9e00adc136ff233a8f4819dd72bcacbc220e2a0b9c3caa1ac

    • SHA512

      3dc188103443a3d2ce02a920e8364a735f5000c46d43fae7b6d36077d6f5912ea463633aabcb4bbc0f9798a47b3a6af92d3651ab840e54a6110a6b34e17f308b

    • SSDEEP

      6144:OCXITG+urF+W2/cH8J6yr/bAxgPLrk1sx5b7ITsqXigaXwVfZ:OCXITDDWmx6BOj8O17R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks