General

  • Target

    7bbd5b5d6b72cf38b05b7f96c2801aad7ba637ed87281fa08d7e927702848116

  • Size

    446KB

  • Sample

    241110-3jvxkaxdpl

  • MD5

    9287dd209df677549dc5632ad0121138

  • SHA1

    fa9cc3f8fb556e84076487450049db6d72368c89

  • SHA256

    7bbd5b5d6b72cf38b05b7f96c2801aad7ba637ed87281fa08d7e927702848116

  • SHA512

    146b8166b5e2693862615b3eadf7111a31a5984dc690bd6bb1b3bbd908f94a0b176018c7036fbba10ea4ceec535ef6966c472e8903ec9b5554c4dd8a0d223708

  • SSDEEP

    12288:xSgreJ4MJ8i7EB37Wk4pi5W0mPpg9VfI:xMJ4MJXwN77C0mPpa

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      7bbd5b5d6b72cf38b05b7f96c2801aad7ba637ed87281fa08d7e927702848116

    • Size

      446KB

    • MD5

      9287dd209df677549dc5632ad0121138

    • SHA1

      fa9cc3f8fb556e84076487450049db6d72368c89

    • SHA256

      7bbd5b5d6b72cf38b05b7f96c2801aad7ba637ed87281fa08d7e927702848116

    • SHA512

      146b8166b5e2693862615b3eadf7111a31a5984dc690bd6bb1b3bbd908f94a0b176018c7036fbba10ea4ceec535ef6966c472e8903ec9b5554c4dd8a0d223708

    • SSDEEP

      12288:xSgreJ4MJ8i7EB37Wk4pi5W0mPpg9VfI:xMJ4MJXwN77C0mPpa

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks