General

  • Target

    80b030d4b726cd38ec493b30aa902ab29bb98831f8117b0b95aaa62c1b7ef8fe

  • Size

    410KB

  • Sample

    241109-dq2k9aypcn

  • MD5

    d55a25c64871fdf091960b424f6ac9e3

  • SHA1

    abbf1c0a705be6fa960be179588051cb696995d3

  • SHA256

    80b030d4b726cd38ec493b30aa902ab29bb98831f8117b0b95aaa62c1b7ef8fe

  • SHA512

    7bff011c2355ccf9fe02ae01155d0be323cbbb17d5327f09d930e21b09e4dc9cfd2c8ccdb4359a784f66daa3545a6b239c476f91f05f7b1f7d94891253612b7d

  • SSDEEP

    6144:kMRBC/R6TE/iRAtvdnm4iYVC0dbflCZjmUdhTjMmhIkzHf0KRGGDkTB5wCuPG1:AW6tc4iGCyfIZjmFmikzHf0D0kTFiG

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      80b030d4b726cd38ec493b30aa902ab29bb98831f8117b0b95aaa62c1b7ef8fe

    • Size

      410KB

    • MD5

      d55a25c64871fdf091960b424f6ac9e3

    • SHA1

      abbf1c0a705be6fa960be179588051cb696995d3

    • SHA256

      80b030d4b726cd38ec493b30aa902ab29bb98831f8117b0b95aaa62c1b7ef8fe

    • SHA512

      7bff011c2355ccf9fe02ae01155d0be323cbbb17d5327f09d930e21b09e4dc9cfd2c8ccdb4359a784f66daa3545a6b239c476f91f05f7b1f7d94891253612b7d

    • SSDEEP

      6144:kMRBC/R6TE/iRAtvdnm4iYVC0dbflCZjmUdhTjMmhIkzHf0KRGGDkTB5wCuPG1:AW6tc4iGCyfIZjmFmikzHf0D0kTFiG

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks