General

  • Target

    063db3d7b82ea5ffb7c246a4243f21c0abd45282a9930c03a22c9b2d2fcf192b

  • Size

    446KB

  • Sample

    241108-lqnndszgpe

  • MD5

    ce309dc7fa3e6e352b6479a9b6dab78b

  • SHA1

    675a83215efa4257b4b6b4fd3b57b56053b500b2

  • SHA256

    063db3d7b82ea5ffb7c246a4243f21c0abd45282a9930c03a22c9b2d2fcf192b

  • SHA512

    c077d9736f3d396ee6d7ca6331dcfdbdec8c575d6f465ae7b655ba8ffb2978838695f69f867803abccd6e5b5a5bd02371789b6e12812596264c49e75a4532800

  • SSDEEP

    6144:+joYSL1G2fCi9q2IxEjfR9uTCCZC9+IpUrfi7+Pe7cTT6Hin6v9R:FbGCIEjfRulC9+IerfaYe7LW6v

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      063db3d7b82ea5ffb7c246a4243f21c0abd45282a9930c03a22c9b2d2fcf192b

    • Size

      446KB

    • MD5

      ce309dc7fa3e6e352b6479a9b6dab78b

    • SHA1

      675a83215efa4257b4b6b4fd3b57b56053b500b2

    • SHA256

      063db3d7b82ea5ffb7c246a4243f21c0abd45282a9930c03a22c9b2d2fcf192b

    • SHA512

      c077d9736f3d396ee6d7ca6331dcfdbdec8c575d6f465ae7b655ba8ffb2978838695f69f867803abccd6e5b5a5bd02371789b6e12812596264c49e75a4532800

    • SSDEEP

      6144:+joYSL1G2fCi9q2IxEjfR9uTCCZC9+IpUrfi7+Pe7cTT6Hin6v9R:FbGCIEjfRulC9+IerfaYe7LW6v

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks