General

  • Target

    5f6bdc776f3a4ada6e0dccb81766f5af977d23330a3862f2d97c12b6529ace1f

  • Size

    446KB

  • Sample

    241110-bn3dnavrbx

  • MD5

    090d75b5df1f38c610b3b9aee8ea0d37

  • SHA1

    cc082def9f43ed2dbef037aac1172a9de19edcb1

  • SHA256

    5f6bdc776f3a4ada6e0dccb81766f5af977d23330a3862f2d97c12b6529ace1f

  • SHA512

    8c486d00b3d1338d7105fc463e7d0eefdfcb6abeabfa98bdb1952cb6184503758e520f019016ee8b8e73114a027bd7d903a2e8287125acede57a4ece9e7c3067

  • SSDEEP

    6144:eg+lNH+X9g4imz2aXhFynFk5wrarFSv0Ytn33CXjIi5xLS6xP5Of8CqK:E3vmz2UyO5yarIcc33CTv5xLnxOf

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      5f6bdc776f3a4ada6e0dccb81766f5af977d23330a3862f2d97c12b6529ace1f

    • Size

      446KB

    • MD5

      090d75b5df1f38c610b3b9aee8ea0d37

    • SHA1

      cc082def9f43ed2dbef037aac1172a9de19edcb1

    • SHA256

      5f6bdc776f3a4ada6e0dccb81766f5af977d23330a3862f2d97c12b6529ace1f

    • SHA512

      8c486d00b3d1338d7105fc463e7d0eefdfcb6abeabfa98bdb1952cb6184503758e520f019016ee8b8e73114a027bd7d903a2e8287125acede57a4ece9e7c3067

    • SSDEEP

      6144:eg+lNH+X9g4imz2aXhFynFk5wrarFSv0Ytn33CXjIi5xLS6xP5Of8CqK:E3vmz2UyO5yarIcc33CTv5xLnxOf

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks