General

  • Target

    58d8507b4c724cf2680d8deb2bf22020bc78d51bb551f84bbef5a949fc95361b

  • Size

    434KB

  • Sample

    241106-yxq4baxenr

  • MD5

    c4781bbcd1eb26c7a907284090a10a36

  • SHA1

    552d22668e041887e5c047a54d343f3c19fd0652

  • SHA256

    58d8507b4c724cf2680d8deb2bf22020bc78d51bb551f84bbef5a949fc95361b

  • SHA512

    aa1a775fbc303f0233e74ae436b82b8122aebdc2615092034319ec0badc124cb752d70117078ba47cbccedc11c42ac4ae6bf072bddb51506bacb689524fc5b87

  • SSDEEP

    6144:MJTpi7bxjww3MK4zPcMZ4fPHsjcm8wldunH7qorYiQI/Q+VK1I:+ihF3QPXZ8sjfBlduneorYU/Q+V

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      58d8507b4c724cf2680d8deb2bf22020bc78d51bb551f84bbef5a949fc95361b

    • Size

      434KB

    • MD5

      c4781bbcd1eb26c7a907284090a10a36

    • SHA1

      552d22668e041887e5c047a54d343f3c19fd0652

    • SHA256

      58d8507b4c724cf2680d8deb2bf22020bc78d51bb551f84bbef5a949fc95361b

    • SHA512

      aa1a775fbc303f0233e74ae436b82b8122aebdc2615092034319ec0badc124cb752d70117078ba47cbccedc11c42ac4ae6bf072bddb51506bacb689524fc5b87

    • SSDEEP

      6144:MJTpi7bxjww3MK4zPcMZ4fPHsjcm8wldunH7qorYiQI/Q+VK1I:+ihF3QPXZ8sjfBlduneorYU/Q+V

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks