General

  • Target

    42f92cb8e00f261cc1eb9453bb993466e520beba2c0181a827ab804a95f905b5

  • Size

    433KB

  • Sample

    241110-yr3vxsthrf

  • MD5

    6c340cedafeec974c436111184f9fda8

  • SHA1

    082abaa93393a4f351d98cd04b091e5dd564b0d6

  • SHA256

    42f92cb8e00f261cc1eb9453bb993466e520beba2c0181a827ab804a95f905b5

  • SHA512

    4addca504cdfbf7b026dff891cd66204e640b3e97519a1754e732b99c15eafa724ea5453ea26883b0fd21f04f8698a328f9ceea38953a9207c70a0099e6dd534

  • SSDEEP

    6144:FkedgevvvIm6t1uVWIad8Ko0aY2xxoNr/psbefV3uu1Hbs/rzte:2edKT/Iqow6oNr/psbet3uuts/rzE

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      42f92cb8e00f261cc1eb9453bb993466e520beba2c0181a827ab804a95f905b5

    • Size

      433KB

    • MD5

      6c340cedafeec974c436111184f9fda8

    • SHA1

      082abaa93393a4f351d98cd04b091e5dd564b0d6

    • SHA256

      42f92cb8e00f261cc1eb9453bb993466e520beba2c0181a827ab804a95f905b5

    • SHA512

      4addca504cdfbf7b026dff891cd66204e640b3e97519a1754e732b99c15eafa724ea5453ea26883b0fd21f04f8698a328f9ceea38953a9207c70a0099e6dd534

    • SSDEEP

      6144:FkedgevvvIm6t1uVWIad8Ko0aY2xxoNr/psbefV3uu1Hbs/rzte:2edKT/Iqow6oNr/psbet3uuts/rzE

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks