General

  • Target

    d26936c900621505067552938f3578a9136a9a6e4148123a250d60de6a51f3d7

  • Size

    434KB

  • Sample

    241110-1h43qsvpa1

  • MD5

    eff870ae6bc79607f838be34924387d9

  • SHA1

    793b5b6b44bb1d20ababc7fab9b11fc62443be1c

  • SHA256

    d26936c900621505067552938f3578a9136a9a6e4148123a250d60de6a51f3d7

  • SHA512

    6afad185056b21ae98ea64f0331a8008174647eb7d9b152d71703861d01432edf4fdedf1776c4cba027ebe8330fe0a0bf8a0b4f87371cc7dcbf548e670a20b16

  • SSDEEP

    12288:Yny46AqB/g47hhVOlv/L1wS3KpiT8nokS:1jR/9VDOlv/GxiTpkS

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      d26936c900621505067552938f3578a9136a9a6e4148123a250d60de6a51f3d7

    • Size

      434KB

    • MD5

      eff870ae6bc79607f838be34924387d9

    • SHA1

      793b5b6b44bb1d20ababc7fab9b11fc62443be1c

    • SHA256

      d26936c900621505067552938f3578a9136a9a6e4148123a250d60de6a51f3d7

    • SHA512

      6afad185056b21ae98ea64f0331a8008174647eb7d9b152d71703861d01432edf4fdedf1776c4cba027ebe8330fe0a0bf8a0b4f87371cc7dcbf548e670a20b16

    • SSDEEP

      12288:Yny46AqB/g47hhVOlv/L1wS3KpiT8nokS:1jR/9VDOlv/GxiTpkS

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks