General

  • Target

    cd29f5f462d3334024822f652cee4d177cff63f35e27ccc4e23d3f57b090b714

  • Size

    394KB

  • Sample

    241105-npjn6asphl

  • MD5

    4f79d3fe66f7490b3181c10b77b8c63f

  • SHA1

    9265cca69bdf9d3b361d38f2d6924e2a963f23cb

  • SHA256

    cd29f5f462d3334024822f652cee4d177cff63f35e27ccc4e23d3f57b090b714

  • SHA512

    631c064c748835aa2132fca8269614c1cee8ce68da4cbd2ca1208cdcfc7bb7b08c93500a61f948def9b12d47d051b0768d9c68fc109dbb2432412f062d6a7c3a

  • SSDEEP

    6144:lPi6qmtILCIkpkM6TocNPoK6PoeZWubwJzOPajIJ+ZMabu0xJMan11zA:l6UWLHkp5In8wJkajQ+eVIJMaQ

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      cd29f5f462d3334024822f652cee4d177cff63f35e27ccc4e23d3f57b090b714

    • Size

      394KB

    • MD5

      4f79d3fe66f7490b3181c10b77b8c63f

    • SHA1

      9265cca69bdf9d3b361d38f2d6924e2a963f23cb

    • SHA256

      cd29f5f462d3334024822f652cee4d177cff63f35e27ccc4e23d3f57b090b714

    • SHA512

      631c064c748835aa2132fca8269614c1cee8ce68da4cbd2ca1208cdcfc7bb7b08c93500a61f948def9b12d47d051b0768d9c68fc109dbb2432412f062d6a7c3a

    • SSDEEP

      6144:lPi6qmtILCIkpkM6TocNPoK6PoeZWubwJzOPajIJ+ZMabu0xJMan11zA:l6UWLHkp5In8wJkajQ+eVIJMaQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks