General

  • Target

    674f55339a16c0c0c580bc00d27e47d0aed210aca755875608133d5b17950e3e

  • Size

    411KB

  • Sample

    241109-xt892szgkb

  • MD5

    fb52b9081a40bf767352b4449c2f1068

  • SHA1

    15eec06d0c9881f43a8778161eeeb308995dcd41

  • SHA256

    674f55339a16c0c0c580bc00d27e47d0aed210aca755875608133d5b17950e3e

  • SHA512

    5c18549f48c3ccb08160f08bbaa45f52cb74607c3af81a88118df65abc7c4bd5138311598b53e9dc4ed98603a2e63eadde0019d465a8d86c5f8e726d037ee057

  • SSDEEP

    12288:QOHOqFFCzvGUHZ1olS7wAxlSoEYInaHqL:nFHW/4SioEYfKL

Malware Config

Extracted

Family

redline

Botnet

170

C2

45.9.20.240:46257

Attributes
  • auth_value

    73f905977a8199ea3d396a0a7d0ae6c8

Targets

    • Target

      674f55339a16c0c0c580bc00d27e47d0aed210aca755875608133d5b17950e3e

    • Size

      411KB

    • MD5

      fb52b9081a40bf767352b4449c2f1068

    • SHA1

      15eec06d0c9881f43a8778161eeeb308995dcd41

    • SHA256

      674f55339a16c0c0c580bc00d27e47d0aed210aca755875608133d5b17950e3e

    • SHA512

      5c18549f48c3ccb08160f08bbaa45f52cb74607c3af81a88118df65abc7c4bd5138311598b53e9dc4ed98603a2e63eadde0019d465a8d86c5f8e726d037ee057

    • SSDEEP

      12288:QOHOqFFCzvGUHZ1olS7wAxlSoEYInaHqL:nFHW/4SioEYfKL

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks