General

  • Target

    9705040c28aa8c392877f49f41c6e017416b56d3a31a2f21c21e7079dd76360e

  • Size

    446KB

  • Sample

    241108-lqbzlasngp

  • MD5

    767113d07fd720f7962ae247ce6a503d

  • SHA1

    d95c5087c941d9c6ffdefc5694738d1510801a19

  • SHA256

    9705040c28aa8c392877f49f41c6e017416b56d3a31a2f21c21e7079dd76360e

  • SHA512

    f8f05f08f79c4dd9a0fd7a877aeb04a7127fafc344ff41e11bbcca80767331fdff4d61aebc8e279e774a50a32a567890873107ffd656ddb7eacbfce2fce89c55

  • SSDEEP

    6144:+joYSL1G2fCi9q2IxEjfR9uTCCZC9+IpUrfi7+Pe7cTT6Hin6v9R:FbGCIEjfRulC9+IerfaYe7LW6v

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      9705040c28aa8c392877f49f41c6e017416b56d3a31a2f21c21e7079dd76360e

    • Size

      446KB

    • MD5

      767113d07fd720f7962ae247ce6a503d

    • SHA1

      d95c5087c941d9c6ffdefc5694738d1510801a19

    • SHA256

      9705040c28aa8c392877f49f41c6e017416b56d3a31a2f21c21e7079dd76360e

    • SHA512

      f8f05f08f79c4dd9a0fd7a877aeb04a7127fafc344ff41e11bbcca80767331fdff4d61aebc8e279e774a50a32a567890873107ffd656ddb7eacbfce2fce89c55

    • SSDEEP

      6144:+joYSL1G2fCi9q2IxEjfR9uTCCZC9+IpUrfi7+Pe7cTT6Hin6v9R:FbGCIEjfRulC9+IerfaYe7LW6v

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks