General

  • Target

    85404ed06348ad41781166872d39c0c1c4635c73c8dbdc568b32ad88d4b4ebed

  • Size

    394KB

  • Sample

    241110-15v4cawfkm

  • MD5

    3d087cc65ed5b439b2c455b17d68fac5

  • SHA1

    48559b896ec55228e6945bf289d1eb101be91d3d

  • SHA256

    85404ed06348ad41781166872d39c0c1c4635c73c8dbdc568b32ad88d4b4ebed

  • SHA512

    8cfbc68f922d72c2d7c5a28e5efb1b0f61ef97d2b524d2bcaf4d3762d30826fbb502e50f417aff4ef403d5dd141a7b4aded3b719608a37e0e7e5c63806742c43

  • SSDEEP

    6144:lPi6qmtILCIkpkM6TocNPoK6PoeZWubwJzOPajIJ+ZMabu0xJMan11zA:l6UWLHkp5In8wJkajQ+eVIJMaQ

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      85404ed06348ad41781166872d39c0c1c4635c73c8dbdc568b32ad88d4b4ebed

    • Size

      394KB

    • MD5

      3d087cc65ed5b439b2c455b17d68fac5

    • SHA1

      48559b896ec55228e6945bf289d1eb101be91d3d

    • SHA256

      85404ed06348ad41781166872d39c0c1c4635c73c8dbdc568b32ad88d4b4ebed

    • SHA512

      8cfbc68f922d72c2d7c5a28e5efb1b0f61ef97d2b524d2bcaf4d3762d30826fbb502e50f417aff4ef403d5dd141a7b4aded3b719608a37e0e7e5c63806742c43

    • SSDEEP

      6144:lPi6qmtILCIkpkM6TocNPoK6PoeZWubwJzOPajIJ+ZMabu0xJMan11zA:l6UWLHkp5In8wJkajQ+eVIJMaQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks