General

  • Target

    5e7b283c6cbea12f2a263472697145c947ba9bbcfedb08e3403e3cede4d1c41a

  • Size

    410KB

  • Sample

    241108-tn3zasvja1

  • MD5

    3eefc9700f7138889c8af0a407e9575d

  • SHA1

    1827d029b854e707750ff50651237b81197e5972

  • SHA256

    5e7b283c6cbea12f2a263472697145c947ba9bbcfedb08e3403e3cede4d1c41a

  • SHA512

    bb650bf6b3944705d36c1aa4e5d7ad4606dfb1728e48458572653b0665ec7065a046c66e93ca6fac8b12c02e4ca7313352861de1af311f7603db2de2f1794c44

  • SSDEEP

    6144:kMRBC/R6TE/iRAtvdnm4iYVC0dbflCZjmUdhTjMmhIkzHf0KRGGDkTB5wCuPG1:AW6tc4iGCyfIZjmFmikzHf0D0kTFiG

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      5e7b283c6cbea12f2a263472697145c947ba9bbcfedb08e3403e3cede4d1c41a

    • Size

      410KB

    • MD5

      3eefc9700f7138889c8af0a407e9575d

    • SHA1

      1827d029b854e707750ff50651237b81197e5972

    • SHA256

      5e7b283c6cbea12f2a263472697145c947ba9bbcfedb08e3403e3cede4d1c41a

    • SHA512

      bb650bf6b3944705d36c1aa4e5d7ad4606dfb1728e48458572653b0665ec7065a046c66e93ca6fac8b12c02e4ca7313352861de1af311f7603db2de2f1794c44

    • SSDEEP

      6144:kMRBC/R6TE/iRAtvdnm4iYVC0dbflCZjmUdhTjMmhIkzHf0KRGGDkTB5wCuPG1:AW6tc4iGCyfIZjmFmikzHf0D0kTFiG

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks