General

  • Target

    f765bc60f1edfd68b293092a543d6436f23595f5ec4c172f7621e9ad8b860a76

  • Size

    394KB

  • Sample

    241110-171rlswfpm

  • MD5

    44abdd78ae894b564e74f0d55ca03900

  • SHA1

    c0001463355e3603e70c46b4d54766a2f9430880

  • SHA256

    f765bc60f1edfd68b293092a543d6436f23595f5ec4c172f7621e9ad8b860a76

  • SHA512

    2a93b704948a3f6f8d08588fd26c3efd52154e4eb911a44fabab6e7378c0947eddb472b8f90042673a92a7ed4c97c16415de330c31351a4416d907e1f01a6142

  • SSDEEP

    6144:JvY/hfaNsYeaDDHBYolh5nkRAnlEJa7xwZ124+JXerMchss+x1UkUV:iht/a3HuUMRu7xw7f+h/wss+ck

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      f765bc60f1edfd68b293092a543d6436f23595f5ec4c172f7621e9ad8b860a76

    • Size

      394KB

    • MD5

      44abdd78ae894b564e74f0d55ca03900

    • SHA1

      c0001463355e3603e70c46b4d54766a2f9430880

    • SHA256

      f765bc60f1edfd68b293092a543d6436f23595f5ec4c172f7621e9ad8b860a76

    • SHA512

      2a93b704948a3f6f8d08588fd26c3efd52154e4eb911a44fabab6e7378c0947eddb472b8f90042673a92a7ed4c97c16415de330c31351a4416d907e1f01a6142

    • SSDEEP

      6144:JvY/hfaNsYeaDDHBYolh5nkRAnlEJa7xwZ124+JXerMchss+x1UkUV:iht/a3HuUMRu7xw7f+h/wss+ck

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks