General

  • Target

    c4c41dcbc540be0dbecb96d8e833801fd4f530c8fa0efb696aafe8fba13a90b1

  • Size

    434KB

  • Sample

    241105-laz2gsybrh

  • MD5

    6ef98fed40fd08385b8381d3bc0dda1c

  • SHA1

    4712f75c6d05c50b77dd5f0d74bce50d1b6612fc

  • SHA256

    c4c41dcbc540be0dbecb96d8e833801fd4f530c8fa0efb696aafe8fba13a90b1

  • SHA512

    a5477a7baa6a9da5a696496aa17c656b6938afac2db1724ede2de39fe30fd6968d94d77293284601337a937b36c166496acd17e8e6e1b8c1d807bf56e6e1c4ca

  • SSDEEP

    6144:MJTpi7bxjww3MK4zPcMZ4fPHsjcm8wldunH7qorYiQI/Q+VK1I:+ihF3QPXZ8sjfBlduneorYU/Q+V

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      c4c41dcbc540be0dbecb96d8e833801fd4f530c8fa0efb696aafe8fba13a90b1

    • Size

      434KB

    • MD5

      6ef98fed40fd08385b8381d3bc0dda1c

    • SHA1

      4712f75c6d05c50b77dd5f0d74bce50d1b6612fc

    • SHA256

      c4c41dcbc540be0dbecb96d8e833801fd4f530c8fa0efb696aafe8fba13a90b1

    • SHA512

      a5477a7baa6a9da5a696496aa17c656b6938afac2db1724ede2de39fe30fd6968d94d77293284601337a937b36c166496acd17e8e6e1b8c1d807bf56e6e1c4ca

    • SSDEEP

      6144:MJTpi7bxjww3MK4zPcMZ4fPHsjcm8wldunH7qorYiQI/Q+VK1I:+ihF3QPXZ8sjfBlduneorYU/Q+V

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks