General

  • Target

    ac6c7175b68cd4ecc67b20d076e23a52fb195d88918d6c684e3fc1a36e222619

  • Size

    434KB

  • Sample

    241105-ljhhssxrcw

  • MD5

    7a858603a54d9dc55258639e9a184444

  • SHA1

    779a665795e742d82dcedf9490eb080fac5a5cd6

  • SHA256

    ac6c7175b68cd4ecc67b20d076e23a52fb195d88918d6c684e3fc1a36e222619

  • SHA512

    c23baf61563d1a49bc0636da7c31cf3a3f7fc5f487d2395487c2d39c247f6ced3158a0fc40181eb77084ac5dbb454e1e0f7ff3c5fbbc4924c5baac4538aa32d4

  • SSDEEP

    6144:MJTpi7bxjww3MK4zPcMZ4fPHsjcm8wldunH7qorYiQI/Q+VK1I:+ihF3QPXZ8sjfBlduneorYU/Q+V

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      ac6c7175b68cd4ecc67b20d076e23a52fb195d88918d6c684e3fc1a36e222619

    • Size

      434KB

    • MD5

      7a858603a54d9dc55258639e9a184444

    • SHA1

      779a665795e742d82dcedf9490eb080fac5a5cd6

    • SHA256

      ac6c7175b68cd4ecc67b20d076e23a52fb195d88918d6c684e3fc1a36e222619

    • SHA512

      c23baf61563d1a49bc0636da7c31cf3a3f7fc5f487d2395487c2d39c247f6ced3158a0fc40181eb77084ac5dbb454e1e0f7ff3c5fbbc4924c5baac4538aa32d4

    • SSDEEP

      6144:MJTpi7bxjww3MK4zPcMZ4fPHsjcm8wldunH7qorYiQI/Q+VK1I:+ihF3QPXZ8sjfBlduneorYU/Q+V

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks