General

  • Target

    7fcbc7ec1d9821e367e6e8e9e06d0ae315af1ccf78a89bdb4cf0fc848ae056e9

  • Size

    298KB

  • Sample

    241111-lv2e2swrcx

  • MD5

    d5d9fbc2661fca9cd9b4df601601ffec

  • SHA1

    c69cb03fc7c1d0bdc6db8b8764b9389181dcb74b

  • SHA256

    7fcbc7ec1d9821e367e6e8e9e06d0ae315af1ccf78a89bdb4cf0fc848ae056e9

  • SHA512

    738519c2b35f7e8f5c7d7a22ae806d0ba9e33dbfac8991383a7db0b63fe8d1287ebda1d7916c0ff0f4d5139456060f01f56c41381ffd94ba847af54250b03325

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      7fcbc7ec1d9821e367e6e8e9e06d0ae315af1ccf78a89bdb4cf0fc848ae056e9

    • Size

      298KB

    • MD5

      d5d9fbc2661fca9cd9b4df601601ffec

    • SHA1

      c69cb03fc7c1d0bdc6db8b8764b9389181dcb74b

    • SHA256

      7fcbc7ec1d9821e367e6e8e9e06d0ae315af1ccf78a89bdb4cf0fc848ae056e9

    • SHA512

      738519c2b35f7e8f5c7d7a22ae806d0ba9e33dbfac8991383a7db0b63fe8d1287ebda1d7916c0ff0f4d5139456060f01f56c41381ffd94ba847af54250b03325

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks