General

  • Target

    0cbe2e1c1d6c11f957fbff81a4661c07835e268a6f4565832b852a85a16b0dbb

  • Size

    411KB

  • Sample

    241110-lf4xmatgkk

  • MD5

    d9aec4e20ef9d78114110b7cc4bbd42a

  • SHA1

    12f707230e3a9f3460cd10258e6bcb8863008c7e

  • SHA256

    0cbe2e1c1d6c11f957fbff81a4661c07835e268a6f4565832b852a85a16b0dbb

  • SHA512

    195d3a36214f6a59b3cb60a27a3d874f2b2f5fea14f888ca68a2b862bada5b2048b2f456c314b393db1ff40e92316054ccee721fc3e0f7b7820864fdda31f612

  • SSDEEP

    6144:WKwDQ4UXE73s4FCu8zli0+mXjA4cz5hb/HH5uixRoKwCrWXZu:3aQ4UXE73slPw4cz5N/HkeRoE/

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      0cbe2e1c1d6c11f957fbff81a4661c07835e268a6f4565832b852a85a16b0dbb

    • Size

      411KB

    • MD5

      d9aec4e20ef9d78114110b7cc4bbd42a

    • SHA1

      12f707230e3a9f3460cd10258e6bcb8863008c7e

    • SHA256

      0cbe2e1c1d6c11f957fbff81a4661c07835e268a6f4565832b852a85a16b0dbb

    • SHA512

      195d3a36214f6a59b3cb60a27a3d874f2b2f5fea14f888ca68a2b862bada5b2048b2f456c314b393db1ff40e92316054ccee721fc3e0f7b7820864fdda31f612

    • SSDEEP

      6144:WKwDQ4UXE73s4FCu8zli0+mXjA4cz5hb/HH5uixRoKwCrWXZu:3aQ4UXE73slPw4cz5N/HkeRoE/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks