General

  • Target

    c577a3678ac5d13099057a123ab11e1c4e014d502e33444bc951ef8cfa88de6b

  • Size

    302KB

  • Sample

    241110-ctrd1sxdnp

  • MD5

    4f43be5990aae8ef15fff4f44c3ef4ef

  • SHA1

    6ff59100617680549bd3453cbed9384af77ab0de

  • SHA256

    c577a3678ac5d13099057a123ab11e1c4e014d502e33444bc951ef8cfa88de6b

  • SHA512

    605864d7a25a2331ac708ec92176b5a205d290d2b84df2e48394902b135cb8019d5be916dc10e0ecd5a1ec10909c36013207d3893894f1dca23326085ed29860

  • SSDEEP

    3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      c577a3678ac5d13099057a123ab11e1c4e014d502e33444bc951ef8cfa88de6b

    • Size

      302KB

    • MD5

      4f43be5990aae8ef15fff4f44c3ef4ef

    • SHA1

      6ff59100617680549bd3453cbed9384af77ab0de

    • SHA256

      c577a3678ac5d13099057a123ab11e1c4e014d502e33444bc951ef8cfa88de6b

    • SHA512

      605864d7a25a2331ac708ec92176b5a205d290d2b84df2e48394902b135cb8019d5be916dc10e0ecd5a1ec10909c36013207d3893894f1dca23326085ed29860

    • SSDEEP

      3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks