General

  • Target

    b22985147381d2e209f1e429f79bfa720551e77c55985b57e7680d86cd139dad

  • Size

    302KB

  • Sample

    241110-fn6hjazfll

  • MD5

    7ba08dc08d081e838eb9b621db5df649

  • SHA1

    21d2127be9d2ddbe30b5e104e5cc43c550f84017

  • SHA256

    b22985147381d2e209f1e429f79bfa720551e77c55985b57e7680d86cd139dad

  • SHA512

    fba0e5bf001c995307c3f858b74bd0c64370c0240a3f319c5553ebe5511cb3f29d89c3219232744ef4825d61199630ea95f9c2b12c2271dbdacd035edf347ba0

  • SSDEEP

    3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      b22985147381d2e209f1e429f79bfa720551e77c55985b57e7680d86cd139dad

    • Size

      302KB

    • MD5

      7ba08dc08d081e838eb9b621db5df649

    • SHA1

      21d2127be9d2ddbe30b5e104e5cc43c550f84017

    • SHA256

      b22985147381d2e209f1e429f79bfa720551e77c55985b57e7680d86cd139dad

    • SHA512

      fba0e5bf001c995307c3f858b74bd0c64370c0240a3f319c5553ebe5511cb3f29d89c3219232744ef4825d61199630ea95f9c2b12c2271dbdacd035edf347ba0

    • SSDEEP

      3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks