General

  • Target

    a3093cc985f6233eb2cabfd00fb089e8d1373ebc9546735e90d4408b46062c64

  • Size

    302KB

  • Sample

    241110-3y513s1lck

  • MD5

    508e1af9897399197b7d9ad7201e10a6

  • SHA1

    fb19f597d5bf5a355a8451d9c788fe48a499777c

  • SHA256

    a3093cc985f6233eb2cabfd00fb089e8d1373ebc9546735e90d4408b46062c64

  • SHA512

    6dd2a21f959007c0ef6e8f43b89ae5eac7acc211faaa66255f988daf027db465abcb3b1dde36338b6d002214afcdd71898fb564d71a4f5429f1870370f7890f8

  • SSDEEP

    3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      a3093cc985f6233eb2cabfd00fb089e8d1373ebc9546735e90d4408b46062c64

    • Size

      302KB

    • MD5

      508e1af9897399197b7d9ad7201e10a6

    • SHA1

      fb19f597d5bf5a355a8451d9c788fe48a499777c

    • SHA256

      a3093cc985f6233eb2cabfd00fb089e8d1373ebc9546735e90d4408b46062c64

    • SHA512

      6dd2a21f959007c0ef6e8f43b89ae5eac7acc211faaa66255f988daf027db465abcb3b1dde36338b6d002214afcdd71898fb564d71a4f5429f1870370f7890f8

    • SSDEEP

      3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks