General

  • Target

    022770b0f8d2432ca3bac2e15f58c72fcb543ed3d7f3f7f57a24c709d78ca633

  • Size

    434KB

  • Sample

    241110-z5yc2aylfm

  • MD5

    33a69d75a41af274ffe72fc00077eb9d

  • SHA1

    8bf0ba79abb263aa0d7a44eb7a2228d1250ca075

  • SHA256

    022770b0f8d2432ca3bac2e15f58c72fcb543ed3d7f3f7f57a24c709d78ca633

  • SHA512

    2d73543d77037997860f093d6e3c779809bda6b3c79154181d20d77926740476bb41aad2f6e5aeb19345eb338279590a53555cb8b88e46f9c17fbe514e2178ef

  • SSDEEP

    6144:IA/r6ksws1/whwnCWCDmV344pWNE20JvHoinidCso6URDkp6:J/rroDCWeW7sE20JPoinnso6UdK

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      022770b0f8d2432ca3bac2e15f58c72fcb543ed3d7f3f7f57a24c709d78ca633

    • Size

      434KB

    • MD5

      33a69d75a41af274ffe72fc00077eb9d

    • SHA1

      8bf0ba79abb263aa0d7a44eb7a2228d1250ca075

    • SHA256

      022770b0f8d2432ca3bac2e15f58c72fcb543ed3d7f3f7f57a24c709d78ca633

    • SHA512

      2d73543d77037997860f093d6e3c779809bda6b3c79154181d20d77926740476bb41aad2f6e5aeb19345eb338279590a53555cb8b88e46f9c17fbe514e2178ef

    • SSDEEP

      6144:IA/r6ksws1/whwnCWCDmV344pWNE20JvHoinidCso6URDkp6:J/rroDCWeW7sE20JPoinnso6UdK

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks