General

  • Target

    849d3d6d7b846dc3e5aad765d943f300646aca8b6fff6da0d4b96a8615c93ae7

  • Size

    411KB

  • Sample

    241108-vwcmrawenm

  • MD5

    354b1d6517afef89a9cfe682b353a451

  • SHA1

    70dea8f2242eb3b8d4d3e68232ad0184db909c9b

  • SHA256

    849d3d6d7b846dc3e5aad765d943f300646aca8b6fff6da0d4b96a8615c93ae7

  • SHA512

    24d2e4efce8648aeade5b96d9186acf03f20e8119345642a55087a0c5adcdc7fda40aedae62727b49324fa28a3b82c83597937a62c7860a89102d53c81bfb4a6

  • SSDEEP

    6144:WKwDQ4UXE73s4FCu8zli0+mXjA4cz5hb/HH5uixRoKwCrWXZu:3aQ4UXE73slPw4cz5N/HkeRoE/

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      849d3d6d7b846dc3e5aad765d943f300646aca8b6fff6da0d4b96a8615c93ae7

    • Size

      411KB

    • MD5

      354b1d6517afef89a9cfe682b353a451

    • SHA1

      70dea8f2242eb3b8d4d3e68232ad0184db909c9b

    • SHA256

      849d3d6d7b846dc3e5aad765d943f300646aca8b6fff6da0d4b96a8615c93ae7

    • SHA512

      24d2e4efce8648aeade5b96d9186acf03f20e8119345642a55087a0c5adcdc7fda40aedae62727b49324fa28a3b82c83597937a62c7860a89102d53c81bfb4a6

    • SSDEEP

      6144:WKwDQ4UXE73s4FCu8zli0+mXjA4cz5hb/HH5uixRoKwCrWXZu:3aQ4UXE73slPw4cz5N/HkeRoE/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks