General

  • Target

    2a65563f5f9a440996baf42461f3726a318ca59a0ef1936554f17acd05e90d72

  • Size

    302KB

  • Sample

    241110-pda4baxaja

  • MD5

    1b792dfb98b91a9b2785ad6e5cc6ed44

  • SHA1

    7b88eabccdf4298fad2f345e41f726d633e3abb8

  • SHA256

    2a65563f5f9a440996baf42461f3726a318ca59a0ef1936554f17acd05e90d72

  • SHA512

    76d96b7abbf728ac3b18e0197b7a8560a429a509cfee4a899999b7622b8eab65824a0c264bbb009adc6d335cac49ab471b6b7cad38b2aa9fdf9495fd54afdedd

  • SSDEEP

    3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      2a65563f5f9a440996baf42461f3726a318ca59a0ef1936554f17acd05e90d72

    • Size

      302KB

    • MD5

      1b792dfb98b91a9b2785ad6e5cc6ed44

    • SHA1

      7b88eabccdf4298fad2f345e41f726d633e3abb8

    • SHA256

      2a65563f5f9a440996baf42461f3726a318ca59a0ef1936554f17acd05e90d72

    • SHA512

      76d96b7abbf728ac3b18e0197b7a8560a429a509cfee4a899999b7622b8eab65824a0c264bbb009adc6d335cac49ab471b6b7cad38b2aa9fdf9495fd54afdedd

    • SSDEEP

      3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks