General

  • Target

    2637f180814b50cf917008a1673d8139bb5156d3c535d86d52122dc6b07f6a99

  • Size

    396KB

  • Sample

    241110-3qtyvaxhke

  • MD5

    4c2d293f6a8f5ab1d869efdfcd4ad41a

  • SHA1

    abc8ec37d505d17f6f2b7659b70c13629e16da17

  • SHA256

    2637f180814b50cf917008a1673d8139bb5156d3c535d86d52122dc6b07f6a99

  • SHA512

    b2cbb407b3e8f22051d441748ab1e3f71f0f83d95f3ccfd5ba4829d6f66c903aef551a6280735eaca6c7bd9149c1b58aeb8f7343a3dca96ad32734d8f0c26587

  • SSDEEP

    6144:kexzTwaVLQ5CcQXJsa6OyPE9SXVk1BQ4X+OZd7vniBqJWBxZL2:kexQaVIClsa6OyKSXVkXQ4X+cJ+qJW4

Malware Config

Extracted

Family

redline

Botnet

170

C2

45.9.20.240:46257

Attributes
  • auth_value

    73f905977a8199ea3d396a0a7d0ae6c8

Targets

    • Target

      2637f180814b50cf917008a1673d8139bb5156d3c535d86d52122dc6b07f6a99

    • Size

      396KB

    • MD5

      4c2d293f6a8f5ab1d869efdfcd4ad41a

    • SHA1

      abc8ec37d505d17f6f2b7659b70c13629e16da17

    • SHA256

      2637f180814b50cf917008a1673d8139bb5156d3c535d86d52122dc6b07f6a99

    • SHA512

      b2cbb407b3e8f22051d441748ab1e3f71f0f83d95f3ccfd5ba4829d6f66c903aef551a6280735eaca6c7bd9149c1b58aeb8f7343a3dca96ad32734d8f0c26587

    • SSDEEP

      6144:kexzTwaVLQ5CcQXJsa6OyPE9SXVk1BQ4X+OZd7vniBqJWBxZL2:kexQaVIClsa6OyKSXVkXQ4X+cJ+qJW4

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks