General

  • Target

    f9f1f4eb3b49f8f3f1336d7a37b44d9fb464e2e14f3626fa233d67fea431012d

  • Size

    446KB

  • Sample

    241104-2xdprsyhke

  • MD5

    3d3db72e49511075f0e88d58be485631

  • SHA1

    9bcaf14f8c5f7efe29121bafdc84d12430338960

  • SHA256

    f9f1f4eb3b49f8f3f1336d7a37b44d9fb464e2e14f3626fa233d67fea431012d

  • SHA512

    5d18f6a35cc4539f4efcdfce11ccdcf0612a8d936259de87f46b0b671eb014fc5d5e27788f41a335645cfa2fb05963defd4c0353594680a05303c74e918212f2

  • SSDEEP

    6144:+joYSL1G2fCi9q2IxEjfR9uTCCZC9+IpUrfi7+Pe7cTT6Hin6v9R:FbGCIEjfRulC9+IerfaYe7LW6v

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      f9f1f4eb3b49f8f3f1336d7a37b44d9fb464e2e14f3626fa233d67fea431012d

    • Size

      446KB

    • MD5

      3d3db72e49511075f0e88d58be485631

    • SHA1

      9bcaf14f8c5f7efe29121bafdc84d12430338960

    • SHA256

      f9f1f4eb3b49f8f3f1336d7a37b44d9fb464e2e14f3626fa233d67fea431012d

    • SHA512

      5d18f6a35cc4539f4efcdfce11ccdcf0612a8d936259de87f46b0b671eb014fc5d5e27788f41a335645cfa2fb05963defd4c0353594680a05303c74e918212f2

    • SSDEEP

      6144:+joYSL1G2fCi9q2IxEjfR9uTCCZC9+IpUrfi7+Pe7cTT6Hin6v9R:FbGCIEjfRulC9+IerfaYe7LW6v

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks