General

  • Target

    524760ef018ca87d860747d3d56aaf314c7c8933fd8471cdeadd680aafca534d

  • Size

    302KB

  • Sample

    241108-kbqnrszanl

  • MD5

    2f997bf013d1061f6b1ca5b4b1870d58

  • SHA1

    687c9b75728d2597b1fa104b0b924837a158d070

  • SHA256

    524760ef018ca87d860747d3d56aaf314c7c8933fd8471cdeadd680aafca534d

  • SHA512

    cccb0da83b4527ab182c20cdbe4bb05632da061292355bd1913ab1497aeef050d37a7062ba18d467b7a87889347cb2f2d56f80ddda0129b9ecde7e4db355e8b2

  • SSDEEP

    3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      524760ef018ca87d860747d3d56aaf314c7c8933fd8471cdeadd680aafca534d

    • Size

      302KB

    • MD5

      2f997bf013d1061f6b1ca5b4b1870d58

    • SHA1

      687c9b75728d2597b1fa104b0b924837a158d070

    • SHA256

      524760ef018ca87d860747d3d56aaf314c7c8933fd8471cdeadd680aafca534d

    • SHA512

      cccb0da83b4527ab182c20cdbe4bb05632da061292355bd1913ab1497aeef050d37a7062ba18d467b7a87889347cb2f2d56f80ddda0129b9ecde7e4db355e8b2

    • SSDEEP

      3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks