General

  • Target

    ce1cce150670422dd5a89d3bcf4b6f9de2938603cbca25f213b180942d40c95c

  • Size

    411KB

  • Sample

    241109-zk187asbnq

  • MD5

    a82f10419dff6ccaf0f43f29834232cd

  • SHA1

    02b76ef1842928a30248662c01966adbaaf14b75

  • SHA256

    ce1cce150670422dd5a89d3bcf4b6f9de2938603cbca25f213b180942d40c95c

  • SHA512

    102260ad855566f14fdef9d63c3cad6ece480eafecab91bda9852ca4e705a100ee55f3500ea0c4a20d0a23971d35808ee41f2abcfd3e3a460206d8a3add0f130

  • SSDEEP

    6144:WKwDQ4UXE73s4FCu8zli0+mXjA4cz5hb/HH5uixRoKwCrWXZu:3aQ4UXE73slPw4cz5N/HkeRoE/

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      ce1cce150670422dd5a89d3bcf4b6f9de2938603cbca25f213b180942d40c95c

    • Size

      411KB

    • MD5

      a82f10419dff6ccaf0f43f29834232cd

    • SHA1

      02b76ef1842928a30248662c01966adbaaf14b75

    • SHA256

      ce1cce150670422dd5a89d3bcf4b6f9de2938603cbca25f213b180942d40c95c

    • SHA512

      102260ad855566f14fdef9d63c3cad6ece480eafecab91bda9852ca4e705a100ee55f3500ea0c4a20d0a23971d35808ee41f2abcfd3e3a460206d8a3add0f130

    • SSDEEP

      6144:WKwDQ4UXE73s4FCu8zli0+mXjA4cz5hb/HH5uixRoKwCrWXZu:3aQ4UXE73slPw4cz5N/HkeRoE/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks