General

  • Target

    456dd578785c4ebb6384c5fb1b58796a5a3910b3b5761b11f1dd0d7fd370ef52

  • Size

    433KB

  • Sample

    241104-1vzc1syama

  • MD5

    163a985662773d06ec6b74fea2f3efd3

  • SHA1

    c0caa6de92de88160eb0391bba7b5373bd06da61

  • SHA256

    456dd578785c4ebb6384c5fb1b58796a5a3910b3b5761b11f1dd0d7fd370ef52

  • SHA512

    df758cded8678881d605992f4b760a9219eff7e50bc1a1f4a77c404407cf7d59962b50d340653fe585b6b502ee92789b6af700ba6d34b0768429085d55d666f6

  • SSDEEP

    12288:A23qDw0q1u4suLA7OTxt05stpu9fobrhJuGHlA:ACqcpZJLA762evuihb

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      456dd578785c4ebb6384c5fb1b58796a5a3910b3b5761b11f1dd0d7fd370ef52

    • Size

      433KB

    • MD5

      163a985662773d06ec6b74fea2f3efd3

    • SHA1

      c0caa6de92de88160eb0391bba7b5373bd06da61

    • SHA256

      456dd578785c4ebb6384c5fb1b58796a5a3910b3b5761b11f1dd0d7fd370ef52

    • SHA512

      df758cded8678881d605992f4b760a9219eff7e50bc1a1f4a77c404407cf7d59962b50d340653fe585b6b502ee92789b6af700ba6d34b0768429085d55d666f6

    • SSDEEP

      12288:A23qDw0q1u4suLA7OTxt05stpu9fobrhJuGHlA:ACqcpZJLA762evuihb

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks