General

  • Target

    7ae03527ad9fd0291715b0b916612678eb9912392da4392b2937486965f839ee

  • Size

    297KB

  • Sample

    241111-hry9qswajf

  • MD5

    90d48a7919a02ddb38d6bba681f3ed6c

  • SHA1

    8643fda08658759329bd5be0a4870a369d65d077

  • SHA256

    7ae03527ad9fd0291715b0b916612678eb9912392da4392b2937486965f839ee

  • SHA512

    e2395d454da4aca0f821d55e65c4a3943583113346b5d02ef4e788b3668452f84263b7b215c10c6d171412979b8f5ce40a6a470bd148a2f07daae0d6cd1b4465

  • SSDEEP

    6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      7ae03527ad9fd0291715b0b916612678eb9912392da4392b2937486965f839ee

    • Size

      297KB

    • MD5

      90d48a7919a02ddb38d6bba681f3ed6c

    • SHA1

      8643fda08658759329bd5be0a4870a369d65d077

    • SHA256

      7ae03527ad9fd0291715b0b916612678eb9912392da4392b2937486965f839ee

    • SHA512

      e2395d454da4aca0f821d55e65c4a3943583113346b5d02ef4e788b3668452f84263b7b215c10c6d171412979b8f5ce40a6a470bd148a2f07daae0d6cd1b4465

    • SSDEEP

      6144:UvHwCMbovF9JUKbHGTRfcfX1m3fbGKUBjcFPx76COzuS92:UPwCMbovF9JUKrGTRVCKajcfgzu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks