General

  • Target

    99691c00ed7bdc46f81ee5fbaaece548674a3521f50b0cd250f714e91d2dbb50

  • Size

    274KB

  • Sample

    241110-z281csvfln

  • MD5

    eefe9e1590758f6db08e43686eaef910

  • SHA1

    48ae7dbf8c14c1c6562dede1ef87d710efbd2ae6

  • SHA256

    99691c00ed7bdc46f81ee5fbaaece548674a3521f50b0cd250f714e91d2dbb50

  • SHA512

    5252afef6f57e927dca387d9a2d69233e3d8064d0c705922bc7d4cf1fb33dad3324b9038eb199f4261139b4405d7ff505658dc633ca41528f9a4a0b16b0b1747

  • SSDEEP

    6144:9IKLljKVST80mz2sahmyhHJ7edIQh/ZB:CKFKVSFmqsUPhp7gIQj

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      99691c00ed7bdc46f81ee5fbaaece548674a3521f50b0cd250f714e91d2dbb50

    • Size

      274KB

    • MD5

      eefe9e1590758f6db08e43686eaef910

    • SHA1

      48ae7dbf8c14c1c6562dede1ef87d710efbd2ae6

    • SHA256

      99691c00ed7bdc46f81ee5fbaaece548674a3521f50b0cd250f714e91d2dbb50

    • SHA512

      5252afef6f57e927dca387d9a2d69233e3d8064d0c705922bc7d4cf1fb33dad3324b9038eb199f4261139b4405d7ff505658dc633ca41528f9a4a0b16b0b1747

    • SSDEEP

      6144:9IKLljKVST80mz2sahmyhHJ7edIQh/ZB:CKFKVSFmqsUPhp7gIQj

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks