General

  • Target

    1aeee4a943f6e18f70d5171699cf4341fbfb23fc6741e7bdeed5919a97e30d68

  • Size

    410KB

  • Sample

    241109-fxe2yaxnh1

  • MD5

    7da6468caba380c2211ae957a223ca9e

  • SHA1

    beb2cfc155146f62d7487fec8c0ba4ab4b3a2ffa

  • SHA256

    1aeee4a943f6e18f70d5171699cf4341fbfb23fc6741e7bdeed5919a97e30d68

  • SHA512

    43a4b274b22d6c4c22e8353703a53d54a09af04d68fd744533a0b12472773dec79409b7c6e734404e6f9ec404b8aca1fe5b5768ce2e24a5710d60056591cbf19

  • SSDEEP

    6144:kMRBC/R6TE/iRAtvdnm4iYVC0dbflCZjmUdhTjMmhIkzHf0KRGGDkTB5wCuPG1:AW6tc4iGCyfIZjmFmikzHf0D0kTFiG

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      1aeee4a943f6e18f70d5171699cf4341fbfb23fc6741e7bdeed5919a97e30d68

    • Size

      410KB

    • MD5

      7da6468caba380c2211ae957a223ca9e

    • SHA1

      beb2cfc155146f62d7487fec8c0ba4ab4b3a2ffa

    • SHA256

      1aeee4a943f6e18f70d5171699cf4341fbfb23fc6741e7bdeed5919a97e30d68

    • SHA512

      43a4b274b22d6c4c22e8353703a53d54a09af04d68fd744533a0b12472773dec79409b7c6e734404e6f9ec404b8aca1fe5b5768ce2e24a5710d60056591cbf19

    • SSDEEP

      6144:kMRBC/R6TE/iRAtvdnm4iYVC0dbflCZjmUdhTjMmhIkzHf0KRGGDkTB5wCuPG1:AW6tc4iGCyfIZjmFmikzHf0D0kTFiG

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks