General

  • Target

    0e3b0b8f7df59bef28dc195f6df3a1404b8083226aca602db6b7cc033b3d154a

  • Size

    274KB

  • Sample

    241104-ydek6sylem

  • MD5

    4919382fc02f9e230a740709f584ba54

  • SHA1

    423092b7c4f720a257952c1e34929cdf70fc8c9f

  • SHA256

    0e3b0b8f7df59bef28dc195f6df3a1404b8083226aca602db6b7cc033b3d154a

  • SHA512

    c4c21f6f3fec866ba61a90cd49011354a27b6baf71014d0203b482d384b3b2203df08619a7fe5e55428239eda30dd285af36b25bd82b269c3165725b97888f10

  • SSDEEP

    6144:9IKLljKVST80mz2sahmyhHJ7edIQh/ZB:CKFKVSFmqsUPhp7gIQj

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      0e3b0b8f7df59bef28dc195f6df3a1404b8083226aca602db6b7cc033b3d154a

    • Size

      274KB

    • MD5

      4919382fc02f9e230a740709f584ba54

    • SHA1

      423092b7c4f720a257952c1e34929cdf70fc8c9f

    • SHA256

      0e3b0b8f7df59bef28dc195f6df3a1404b8083226aca602db6b7cc033b3d154a

    • SHA512

      c4c21f6f3fec866ba61a90cd49011354a27b6baf71014d0203b482d384b3b2203df08619a7fe5e55428239eda30dd285af36b25bd82b269c3165725b97888f10

    • SSDEEP

      6144:9IKLljKVST80mz2sahmyhHJ7edIQh/ZB:CKFKVSFmqsUPhp7gIQj

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks