General

  • Target

    d5900765b8b451f5b6a1f7cdde2ff5418fc111ac1eecf7704e5dd7cf81a99f7c

  • Size

    434KB

  • Sample

    241105-m23gcs1ank

  • MD5

    0c8c3db875da3f7bee37db36eaaef3a9

  • SHA1

    1b2b43b79fce99b28bd3946f43d1b36e4477c23f

  • SHA256

    d5900765b8b451f5b6a1f7cdde2ff5418fc111ac1eecf7704e5dd7cf81a99f7c

  • SHA512

    bf658de658f45bbcfa7586e024cdefd863ee3c643f83de450bd2b56c23bd08e17ffca7f4d1f800c9164d85d84ec638908b5740b966427add777b72008d50d328

  • SSDEEP

    12288:Yny46AqB/g47hhVOlv/L1wS3KpiT8nokS:1jR/9VDOlv/GxiTpkS

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      d5900765b8b451f5b6a1f7cdde2ff5418fc111ac1eecf7704e5dd7cf81a99f7c

    • Size

      434KB

    • MD5

      0c8c3db875da3f7bee37db36eaaef3a9

    • SHA1

      1b2b43b79fce99b28bd3946f43d1b36e4477c23f

    • SHA256

      d5900765b8b451f5b6a1f7cdde2ff5418fc111ac1eecf7704e5dd7cf81a99f7c

    • SHA512

      bf658de658f45bbcfa7586e024cdefd863ee3c643f83de450bd2b56c23bd08e17ffca7f4d1f800c9164d85d84ec638908b5740b966427add777b72008d50d328

    • SSDEEP

      12288:Yny46AqB/g47hhVOlv/L1wS3KpiT8nokS:1jR/9VDOlv/GxiTpkS

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks