General

  • Target

    082f257466bacdbec16843f4521667a76ccf1c0a16e918896dfc73481ec649c5

  • Size

    370KB

  • Sample

    241111-h5lkssvgqj

  • MD5

    65ccfd4f85255d6ac6069b0ec6df3ea8

  • SHA1

    41584bcbeea81df586e3c3c732faa27b3854b148

  • SHA256

    082f257466bacdbec16843f4521667a76ccf1c0a16e918896dfc73481ec649c5

  • SHA512

    e7d1636ab5c73404eebca707173589b2af0934276b8dd213db0cac668fcf4efe1f2d10e341338a5a0671c0167284ce51e501702530441b5d1080e323184b21e0

  • SSDEEP

    6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      082f257466bacdbec16843f4521667a76ccf1c0a16e918896dfc73481ec649c5

    • Size

      370KB

    • MD5

      65ccfd4f85255d6ac6069b0ec6df3ea8

    • SHA1

      41584bcbeea81df586e3c3c732faa27b3854b148

    • SHA256

      082f257466bacdbec16843f4521667a76ccf1c0a16e918896dfc73481ec649c5

    • SHA512

      e7d1636ab5c73404eebca707173589b2af0934276b8dd213db0cac668fcf4efe1f2d10e341338a5a0671c0167284ce51e501702530441b5d1080e323184b21e0

    • SSDEEP

      6144:5aq04PVZTOVCKCvwhMxR2HqOvobcjgw3DBMN9S0WLBfgb7ITsqXigaXwVfi:5aq04PvJDwex4HqTbckoti9wtfA7R

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks