General

  • Target

    5c774a0704ad57c47053515c288571c36a75ac74b8f75498d39311abd2703458

  • Size

    274KB

  • Sample

    241107-mkwbqazmfw

  • MD5

    ba017a445d642354b3f5108446bb61e2

  • SHA1

    e819ff02eaf4885a244d0e4dff67ea6455f4e5fd

  • SHA256

    5c774a0704ad57c47053515c288571c36a75ac74b8f75498d39311abd2703458

  • SHA512

    ab395eea432311df780897dbbaded35f6e1fdd672d7b1601505b2852a342cb59a7ca15237bc82f1e36e30a6f09b063b786ca078092994d27f52b6a2ab856a8bf

  • SSDEEP

    6144:3OzLoJazKULP9wHZZNQHnjSGWLSioSEIYR/mJekTfj4B:ezUJa3p0NQHGSwNYR+BTc

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      5c774a0704ad57c47053515c288571c36a75ac74b8f75498d39311abd2703458

    • Size

      274KB

    • MD5

      ba017a445d642354b3f5108446bb61e2

    • SHA1

      e819ff02eaf4885a244d0e4dff67ea6455f4e5fd

    • SHA256

      5c774a0704ad57c47053515c288571c36a75ac74b8f75498d39311abd2703458

    • SHA512

      ab395eea432311df780897dbbaded35f6e1fdd672d7b1601505b2852a342cb59a7ca15237bc82f1e36e30a6f09b063b786ca078092994d27f52b6a2ab856a8bf

    • SSDEEP

      6144:3OzLoJazKULP9wHZZNQHnjSGWLSioSEIYR/mJekTfj4B:ezUJa3p0NQHGSwNYR+BTc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks