General

  • Target

    bc4952997d56d9fad4e4cba062668b8c899631f232c29010f9995b571be8d416

  • Size

    411KB

  • Sample

    241109-ff4zqs1jgq

  • MD5

    1b3827da55cd56e89c85a72102485ac6

  • SHA1

    4e2239b68257d634543bf47bc5f9cfd7113ebc6c

  • SHA256

    bc4952997d56d9fad4e4cba062668b8c899631f232c29010f9995b571be8d416

  • SHA512

    26f94e5a23318e22b1e7ec2aa800d059268f0c2a5d0436a6ab65ebda118f19f607e147b6e21a2f45d1028db88ffd7fef375651e4a9ad07476efd9fcc19ec970e

  • SSDEEP

    6144:WKwDQ4UXE73s4FCu8zli0+mXjA4cz5hb/HH5uixRoKwCrWXZu:3aQ4UXE73slPw4cz5N/HkeRoE/

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      bc4952997d56d9fad4e4cba062668b8c899631f232c29010f9995b571be8d416

    • Size

      411KB

    • MD5

      1b3827da55cd56e89c85a72102485ac6

    • SHA1

      4e2239b68257d634543bf47bc5f9cfd7113ebc6c

    • SHA256

      bc4952997d56d9fad4e4cba062668b8c899631f232c29010f9995b571be8d416

    • SHA512

      26f94e5a23318e22b1e7ec2aa800d059268f0c2a5d0436a6ab65ebda118f19f607e147b6e21a2f45d1028db88ffd7fef375651e4a9ad07476efd9fcc19ec970e

    • SSDEEP

      6144:WKwDQ4UXE73s4FCu8zli0+mXjA4cz5hb/HH5uixRoKwCrWXZu:3aQ4UXE73slPw4cz5N/HkeRoE/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks