General

  • Target

    fba85a6c8dcae4e937267c3a365019195629aabe951dd865dfb3402a34b21732

  • Size

    302KB

  • Sample

    241109-wz8d9szcjr

  • MD5

    960c00973e11b579f70477ee914a43f5

  • SHA1

    b57a57064ff83fc107cf38584b3d9f4ee0b129db

  • SHA256

    fba85a6c8dcae4e937267c3a365019195629aabe951dd865dfb3402a34b21732

  • SHA512

    f3a3e7a67c8da00e2a65a53f64086c4a85d041fcc408364cb42987d4cbaa9a22557045d6bb17076699469b6088195e31890cda66e56742286572e3ff91b2bddb

  • SSDEEP

    3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      fba85a6c8dcae4e937267c3a365019195629aabe951dd865dfb3402a34b21732

    • Size

      302KB

    • MD5

      960c00973e11b579f70477ee914a43f5

    • SHA1

      b57a57064ff83fc107cf38584b3d9f4ee0b129db

    • SHA256

      fba85a6c8dcae4e937267c3a365019195629aabe951dd865dfb3402a34b21732

    • SHA512

      f3a3e7a67c8da00e2a65a53f64086c4a85d041fcc408364cb42987d4cbaa9a22557045d6bb17076699469b6088195e31890cda66e56742286572e3ff91b2bddb

    • SSDEEP

      3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks