General

  • Target

    0fd040d2fcede66ab7b659c584b7108559938f31b439f8ea8490cbad65d7b0bc

  • Size

    302KB

  • Sample

    241110-r1fnesygkh

  • MD5

    78e60af2ebb33aa80bb6b3cfb5c7e1a1

  • SHA1

    03d744583e465b345e8807f82712ca358bd04b81

  • SHA256

    0fd040d2fcede66ab7b659c584b7108559938f31b439f8ea8490cbad65d7b0bc

  • SHA512

    9a3e9c6fa157c82a08f815c8d20ca04aedbce1ee466d50b77df10e0f20c14aa6fb4af41eedc37a3dbc664e7d07be4db40ed88d6ec3d904554e5b5adb0c02cfa2

  • SSDEEP

    3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      0fd040d2fcede66ab7b659c584b7108559938f31b439f8ea8490cbad65d7b0bc

    • Size

      302KB

    • MD5

      78e60af2ebb33aa80bb6b3cfb5c7e1a1

    • SHA1

      03d744583e465b345e8807f82712ca358bd04b81

    • SHA256

      0fd040d2fcede66ab7b659c584b7108559938f31b439f8ea8490cbad65d7b0bc

    • SHA512

      9a3e9c6fa157c82a08f815c8d20ca04aedbce1ee466d50b77df10e0f20c14aa6fb4af41eedc37a3dbc664e7d07be4db40ed88d6ec3d904554e5b5adb0c02cfa2

    • SSDEEP

      3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks