General

  • Target

    981fcd8a7f6e0a20c6d469eea82b5b698735e3e89082df5fb4c4b804f2424869

  • Size

    427KB

  • Sample

    241111-hcy1esvfqe

  • MD5

    e4d8ca7c6511afa1bc49cc50fa33c0d0

  • SHA1

    6ca201cf81f485aa4d6cc34e370624e7e8a72826

  • SHA256

    981fcd8a7f6e0a20c6d469eea82b5b698735e3e89082df5fb4c4b804f2424869

  • SHA512

    ca6d2552636a84ba6afb76a6c17d1b2832bd421c4a887834b965e26920599310994eaf73dd01bdfb6cfc7e834d2b74abf9eb00e52cd9ae73d355c3defc25b996

  • SSDEEP

    6144:XxnVbTjtyULhQVfiYUbqBAXdfWe22Yi5/L/ngOBWJfr1PqaRJ0:XxVbsgcinqBAXNT22Yi5/L/n6r1Pq

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      981fcd8a7f6e0a20c6d469eea82b5b698735e3e89082df5fb4c4b804f2424869

    • Size

      427KB

    • MD5

      e4d8ca7c6511afa1bc49cc50fa33c0d0

    • SHA1

      6ca201cf81f485aa4d6cc34e370624e7e8a72826

    • SHA256

      981fcd8a7f6e0a20c6d469eea82b5b698735e3e89082df5fb4c4b804f2424869

    • SHA512

      ca6d2552636a84ba6afb76a6c17d1b2832bd421c4a887834b965e26920599310994eaf73dd01bdfb6cfc7e834d2b74abf9eb00e52cd9ae73d355c3defc25b996

    • SSDEEP

      6144:XxnVbTjtyULhQVfiYUbqBAXdfWe22Yi5/L/ngOBWJfr1PqaRJ0:XxVbsgcinqBAXNT22Yi5/L/n6r1Pq

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks