General

  • Target

    810d92c23c2e559a32fbfb93471e4904331c6a5e49fb807860820eab8186280e

  • Size

    302KB

  • Sample

    241110-mhqcpatrgs

  • MD5

    cb235225317dace03051f34e9fa8b645

  • SHA1

    ef3afd54fa3f89c03a8db4d14aa35aa6f68c351e

  • SHA256

    810d92c23c2e559a32fbfb93471e4904331c6a5e49fb807860820eab8186280e

  • SHA512

    d1ff33dac5997a4ef813e4ea158c04c0bdeb7cce768e92255ff33459bafbf15843f2d98af6ad621b1bd83729f8dd12765c7c2147162d6a7f47de35cdcfa8f82f

  • SSDEEP

    3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      810d92c23c2e559a32fbfb93471e4904331c6a5e49fb807860820eab8186280e

    • Size

      302KB

    • MD5

      cb235225317dace03051f34e9fa8b645

    • SHA1

      ef3afd54fa3f89c03a8db4d14aa35aa6f68c351e

    • SHA256

      810d92c23c2e559a32fbfb93471e4904331c6a5e49fb807860820eab8186280e

    • SHA512

      d1ff33dac5997a4ef813e4ea158c04c0bdeb7cce768e92255ff33459bafbf15843f2d98af6ad621b1bd83729f8dd12765c7c2147162d6a7f47de35cdcfa8f82f

    • SSDEEP

      3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks