General

  • Target

    d31a01f0b0bd02fe9959ed17882a1972fe3926f14b19fe37835ee36b6751c13f

  • Size

    422KB

  • Sample

    241110-petxtaxakh

  • MD5

    423cb476584f31695c0a3584db9d4dfc

  • SHA1

    3312ff37e3a280186256533f38b0ea244fa1168e

  • SHA256

    d31a01f0b0bd02fe9959ed17882a1972fe3926f14b19fe37835ee36b6751c13f

  • SHA512

    a1507e847f0feefe9aa2026ea47ee3029c8b3a4b82229e9e9efa5777f65114fd49a7def77c4b61a8e4a057573a6f2a38b4b20f9da697e1c48fd8655c367f8192

  • SSDEEP

    12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      d31a01f0b0bd02fe9959ed17882a1972fe3926f14b19fe37835ee36b6751c13f

    • Size

      422KB

    • MD5

      423cb476584f31695c0a3584db9d4dfc

    • SHA1

      3312ff37e3a280186256533f38b0ea244fa1168e

    • SHA256

      d31a01f0b0bd02fe9959ed17882a1972fe3926f14b19fe37835ee36b6751c13f

    • SHA512

      a1507e847f0feefe9aa2026ea47ee3029c8b3a4b82229e9e9efa5777f65114fd49a7def77c4b61a8e4a057573a6f2a38b4b20f9da697e1c48fd8655c367f8192

    • SSDEEP

      12288:snEt5YG/nn8LXObRBxF6fSoDJMeAZomw:snw/nCXObf6zNMGN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks