General

  • Target

    70203a02019978e4eb5553ebd6e6850a11957571d2114e9514e85bde10405264

  • Size

    273KB

  • Sample

    241105-k1n68s1kdn

  • MD5

    efc77dabe9d9b1af6c0f1a4554bab589

  • SHA1

    05fc55b6cd51eb9af6b1076c34bdf3e540130c9e

  • SHA256

    70203a02019978e4eb5553ebd6e6850a11957571d2114e9514e85bde10405264

  • SHA512

    2da0847f412538703a369e8220bddb9607397c97ac697ab3bef881a6705a3cb6827c95ec8f46b2eac3e8f2f45abe9d1e6e7d37c90c2cb669db0cbe1df3cda8bb

  • SSDEEP

    6144:i8qL1OPq8uDd1iFrjAF8X6wca3noINCeGFwB:5qcPqFMrjAKKwcWoV6

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      70203a02019978e4eb5553ebd6e6850a11957571d2114e9514e85bde10405264

    • Size

      273KB

    • MD5

      efc77dabe9d9b1af6c0f1a4554bab589

    • SHA1

      05fc55b6cd51eb9af6b1076c34bdf3e540130c9e

    • SHA256

      70203a02019978e4eb5553ebd6e6850a11957571d2114e9514e85bde10405264

    • SHA512

      2da0847f412538703a369e8220bddb9607397c97ac697ab3bef881a6705a3cb6827c95ec8f46b2eac3e8f2f45abe9d1e6e7d37c90c2cb669db0cbe1df3cda8bb

    • SSDEEP

      6144:i8qL1OPq8uDd1iFrjAF8X6wca3noINCeGFwB:5qcPqFMrjAKKwcWoV6

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks