General

  • Target

    9d2e2cbaa347ea8869392f62df26dfcc41f228d782414c2f311796046392efde

  • Size

    434KB

  • Sample

    241104-xt9ktavlbw

  • MD5

    794bb31016d03032a0e1b50192d782a6

  • SHA1

    72f2d7d791ee0c316f4a610cf7f76a96fb6a4c46

  • SHA256

    9d2e2cbaa347ea8869392f62df26dfcc41f228d782414c2f311796046392efde

  • SHA512

    4379c90d8a66497a66b968c17d591ca73e3db4d24cd6fc7c67ba7991a07392c0df6da76d3bcfd409a23ad84e08d1305404e54f0941e24860b92c82fce0f3a7a3

  • SSDEEP

    6144:MJTpi7bxjww3MK4zPcMZ4fPHsjcm8wldunH7qorYiQI/Q+VK1I:+ihF3QPXZ8sjfBlduneorYU/Q+V

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      9d2e2cbaa347ea8869392f62df26dfcc41f228d782414c2f311796046392efde

    • Size

      434KB

    • MD5

      794bb31016d03032a0e1b50192d782a6

    • SHA1

      72f2d7d791ee0c316f4a610cf7f76a96fb6a4c46

    • SHA256

      9d2e2cbaa347ea8869392f62df26dfcc41f228d782414c2f311796046392efde

    • SHA512

      4379c90d8a66497a66b968c17d591ca73e3db4d24cd6fc7c67ba7991a07392c0df6da76d3bcfd409a23ad84e08d1305404e54f0941e24860b92c82fce0f3a7a3

    • SSDEEP

      6144:MJTpi7bxjww3MK4zPcMZ4fPHsjcm8wldunH7qorYiQI/Q+VK1I:+ihF3QPXZ8sjfBlduneorYU/Q+V

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks