General

  • Target

    39900b3f7c51402b905ebd7637956a06801944fac1de8b16e8419c2e312b7bb7

  • Size

    410KB

  • Sample

    241110-kadykswnbk

  • MD5

    032705ba2501563d9b4d6f67e10748ff

  • SHA1

    5ca3b6865157b2b27cf03e1010c219c21226ede4

  • SHA256

    39900b3f7c51402b905ebd7637956a06801944fac1de8b16e8419c2e312b7bb7

  • SHA512

    0ecca3d75485b7d247c17d039b8f47e6d4fdf3c64b3abbe3dc86b52a774cab5d2494f4df57503ad2ef61894fc2cac70af4a5966a69a40a86ba8b64d4514def0e

  • SSDEEP

    6144:kMRBC/R6TE/iRAtvdnm4iYVC0dbflCZjmUdhTjMmhIkzHf0KRGGDkTB5wCuPG1:AW6tc4iGCyfIZjmFmikzHf0D0kTFiG

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      39900b3f7c51402b905ebd7637956a06801944fac1de8b16e8419c2e312b7bb7

    • Size

      410KB

    • MD5

      032705ba2501563d9b4d6f67e10748ff

    • SHA1

      5ca3b6865157b2b27cf03e1010c219c21226ede4

    • SHA256

      39900b3f7c51402b905ebd7637956a06801944fac1de8b16e8419c2e312b7bb7

    • SHA512

      0ecca3d75485b7d247c17d039b8f47e6d4fdf3c64b3abbe3dc86b52a774cab5d2494f4df57503ad2ef61894fc2cac70af4a5966a69a40a86ba8b64d4514def0e

    • SSDEEP

      6144:kMRBC/R6TE/iRAtvdnm4iYVC0dbflCZjmUdhTjMmhIkzHf0KRGGDkTB5wCuPG1:AW6tc4iGCyfIZjmFmikzHf0D0kTFiG

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks