General

  • Target

    582598b10621bc9c001c83f08fce8948de65dda93edc60e849d0057a7ee11668

  • Size

    434KB

  • Sample

    241110-z6e8vavgkk

  • MD5

    4f6f9383c57e12f2e7bb123f05b879bf

  • SHA1

    2b4e4941c64eefb81770e1b7bdc191d5fd76db2a

  • SHA256

    582598b10621bc9c001c83f08fce8948de65dda93edc60e849d0057a7ee11668

  • SHA512

    2c977102b845688eeee99c994bac10f3edb9d2bf6f41897199b1d55bb808de9e8e97458f2c92e21bedd61b3cd0433558daf0d5c5f85669561e9e69b4304aa24b

  • SSDEEP

    6144:Hr0QYxhADcxG776qrJvzPkAoaTCoWYCYe7oBAimyA0L2Zv:L0Q4hIcM7+0v7kN0CjYCYcoBAsA0L2p

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      582598b10621bc9c001c83f08fce8948de65dda93edc60e849d0057a7ee11668

    • Size

      434KB

    • MD5

      4f6f9383c57e12f2e7bb123f05b879bf

    • SHA1

      2b4e4941c64eefb81770e1b7bdc191d5fd76db2a

    • SHA256

      582598b10621bc9c001c83f08fce8948de65dda93edc60e849d0057a7ee11668

    • SHA512

      2c977102b845688eeee99c994bac10f3edb9d2bf6f41897199b1d55bb808de9e8e97458f2c92e21bedd61b3cd0433558daf0d5c5f85669561e9e69b4304aa24b

    • SSDEEP

      6144:Hr0QYxhADcxG776qrJvzPkAoaTCoWYCYe7oBAimyA0L2Zv:L0Q4hIcM7+0v7kN0CjYCYcoBAsA0L2p

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks