General

  • Target

    243cbebd14b0d6dcddca97a3ab0000534e58fa7fccafca2be9dc84e0e7683dd5

  • Size

    411KB

  • Sample

    241109-knnpyazrcs

  • MD5

    640f03150697db8dff14868c0a641dd3

  • SHA1

    1c4d468960ccaf9448deba57a6a7e85bc176ccc4

  • SHA256

    243cbebd14b0d6dcddca97a3ab0000534e58fa7fccafca2be9dc84e0e7683dd5

  • SHA512

    02e898a9f18ffa34973353c9d0b808d77549d7f1f36e762242befc1371a9e5419a1239c69a45d9ac924119933a40b27038d1f015a0af040b00aeb713a5749199

  • SSDEEP

    6144:WKwDQ4UXE73s4FCu8zli0+mXjA4cz5hb/HH5uixRoKwCrWXZu:3aQ4UXE73slPw4cz5N/HkeRoE/

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      243cbebd14b0d6dcddca97a3ab0000534e58fa7fccafca2be9dc84e0e7683dd5

    • Size

      411KB

    • MD5

      640f03150697db8dff14868c0a641dd3

    • SHA1

      1c4d468960ccaf9448deba57a6a7e85bc176ccc4

    • SHA256

      243cbebd14b0d6dcddca97a3ab0000534e58fa7fccafca2be9dc84e0e7683dd5

    • SHA512

      02e898a9f18ffa34973353c9d0b808d77549d7f1f36e762242befc1371a9e5419a1239c69a45d9ac924119933a40b27038d1f015a0af040b00aeb713a5749199

    • SSDEEP

      6144:WKwDQ4UXE73s4FCu8zli0+mXjA4cz5hb/HH5uixRoKwCrWXZu:3aQ4UXE73slPw4cz5N/HkeRoE/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks