General

  • Target

    9555361d37b4c4c04cdfa54bc803d9fbec5ef8457da48bed709f4ac041ff8b3c

  • Size

    410KB

  • Sample

    241109-lb7sqasarr

  • MD5

    a9865a0926e2b1b7d996dd92d7719b98

  • SHA1

    9fc8b66ecb0b74606873a931bf5f2a9f57cb9dfd

  • SHA256

    9555361d37b4c4c04cdfa54bc803d9fbec5ef8457da48bed709f4ac041ff8b3c

  • SHA512

    b0f6a949d59d11f47d35a322ed61b5beaa6bc3727e4b56f873a831fc32867e6b187069764c4f4154137d8ae59a67b3a4b91325649b5f1e922fa75d644cd3a5c8

  • SSDEEP

    6144:kMRBC/R6TE/iRAtvdnm4iYVC0dbflCZjmUdhTjMmhIkzHf0KRGGDkTB5wCuPG1:AW6tc4iGCyfIZjmFmikzHf0D0kTFiG

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      9555361d37b4c4c04cdfa54bc803d9fbec5ef8457da48bed709f4ac041ff8b3c

    • Size

      410KB

    • MD5

      a9865a0926e2b1b7d996dd92d7719b98

    • SHA1

      9fc8b66ecb0b74606873a931bf5f2a9f57cb9dfd

    • SHA256

      9555361d37b4c4c04cdfa54bc803d9fbec5ef8457da48bed709f4ac041ff8b3c

    • SHA512

      b0f6a949d59d11f47d35a322ed61b5beaa6bc3727e4b56f873a831fc32867e6b187069764c4f4154137d8ae59a67b3a4b91325649b5f1e922fa75d644cd3a5c8

    • SSDEEP

      6144:kMRBC/R6TE/iRAtvdnm4iYVC0dbflCZjmUdhTjMmhIkzHf0KRGGDkTB5wCuPG1:AW6tc4iGCyfIZjmFmikzHf0D0kTFiG

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks