General

  • Target

    9c68775c58f3fb7f10e3bf78e714fc87273c5ad293f8091c3ba0b30fe42e90f6

  • Size

    411KB

  • Sample

    241109-q2c39avhqa

  • MD5

    a98878acc19885874dc180ce2feff19c

  • SHA1

    27906a8b45b51b5e4e5911db5e4f7fe3f510d6cc

  • SHA256

    9c68775c58f3fb7f10e3bf78e714fc87273c5ad293f8091c3ba0b30fe42e90f6

  • SHA512

    a791c17b32c0fbab33360f2c46e243a424d56fd0fc5310559d1502908adf24c0291a99852b6036bec6ff0ba2c9c876b882d14eca90488b3d15447654a0b193f3

  • SSDEEP

    6144:WKwDQ4UXE73s4FCu8zli0+mXjA4cz5hb/HH5uixRoKwCrWXZu:3aQ4UXE73slPw4cz5N/HkeRoE/

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      9c68775c58f3fb7f10e3bf78e714fc87273c5ad293f8091c3ba0b30fe42e90f6

    • Size

      411KB

    • MD5

      a98878acc19885874dc180ce2feff19c

    • SHA1

      27906a8b45b51b5e4e5911db5e4f7fe3f510d6cc

    • SHA256

      9c68775c58f3fb7f10e3bf78e714fc87273c5ad293f8091c3ba0b30fe42e90f6

    • SHA512

      a791c17b32c0fbab33360f2c46e243a424d56fd0fc5310559d1502908adf24c0291a99852b6036bec6ff0ba2c9c876b882d14eca90488b3d15447654a0b193f3

    • SSDEEP

      6144:WKwDQ4UXE73s4FCu8zli0+mXjA4cz5hb/HH5uixRoKwCrWXZu:3aQ4UXE73slPw4cz5N/HkeRoE/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks