General

  • Target

    7ad3c51296b460950a284dc7a0d32d8ce2aec34a97b3afc57411e67000f588da

  • Size

    410KB

  • Sample

    241109-tkz38sxfjc

  • MD5

    6c3538b24d03fc24b3de9c4d8385ba7d

  • SHA1

    ed1122ec3c0e6138d994c9b5f3384fdb3c5078b9

  • SHA256

    7ad3c51296b460950a284dc7a0d32d8ce2aec34a97b3afc57411e67000f588da

  • SHA512

    6fc3db6c1f242ca8037584e6a627969b33eda21230e94cea16df0528f0219f9478ce6741be0e50b5d816f4f7cebf55c8448e7767821ae179c823c7df4b233bef

  • SSDEEP

    6144:kMRBC/R6TE/iRAtvdnm4iYVC0dbflCZjmUdhTjMmhIkzHf0KRGGDkTB5wCuPG1:AW6tc4iGCyfIZjmFmikzHf0D0kTFiG

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      7ad3c51296b460950a284dc7a0d32d8ce2aec34a97b3afc57411e67000f588da

    • Size

      410KB

    • MD5

      6c3538b24d03fc24b3de9c4d8385ba7d

    • SHA1

      ed1122ec3c0e6138d994c9b5f3384fdb3c5078b9

    • SHA256

      7ad3c51296b460950a284dc7a0d32d8ce2aec34a97b3afc57411e67000f588da

    • SHA512

      6fc3db6c1f242ca8037584e6a627969b33eda21230e94cea16df0528f0219f9478ce6741be0e50b5d816f4f7cebf55c8448e7767821ae179c823c7df4b233bef

    • SSDEEP

      6144:kMRBC/R6TE/iRAtvdnm4iYVC0dbflCZjmUdhTjMmhIkzHf0KRGGDkTB5wCuPG1:AW6tc4iGCyfIZjmFmikzHf0D0kTFiG

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks