General

  • Target

    b954839606e98052d512230c11844c69b1109b8447fb4df9cebf774a52b4391b

  • Size

    447KB

  • Sample

    241110-3xxnbaxlby

  • MD5

    7dd03cf78bd9949df7f5dae0dba5c3e2

  • SHA1

    8df40b5dbc924b2341bfe98255a5073b02a461ce

  • SHA256

    b954839606e98052d512230c11844c69b1109b8447fb4df9cebf774a52b4391b

  • SHA512

    f968d32460e8566853863b85c59a48de6ce1a53fe07f6b0b206ebb1041632afab824a7290cc693fc955b65d2947f4cdb1b40c727dda78bbc2824ca41c4c84fb5

  • SSDEEP

    6144:/XO7VIXtU2yzAv0SzT2pXsjPTA5zZUylECTi1zLKS2ri8Tq7Cq/O:8VIXtLyzA8SeyPTqZUylhG1zLYm8TyO

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      b954839606e98052d512230c11844c69b1109b8447fb4df9cebf774a52b4391b

    • Size

      447KB

    • MD5

      7dd03cf78bd9949df7f5dae0dba5c3e2

    • SHA1

      8df40b5dbc924b2341bfe98255a5073b02a461ce

    • SHA256

      b954839606e98052d512230c11844c69b1109b8447fb4df9cebf774a52b4391b

    • SHA512

      f968d32460e8566853863b85c59a48de6ce1a53fe07f6b0b206ebb1041632afab824a7290cc693fc955b65d2947f4cdb1b40c727dda78bbc2824ca41c4c84fb5

    • SSDEEP

      6144:/XO7VIXtU2yzAv0SzT2pXsjPTA5zZUylECTi1zLKS2ri8Tq7Cq/O:8VIXtLyzA8SeyPTqZUylhG1zLYm8TyO

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks