General

  • Target

    d9904ae503c6a57524bf88aa0238269267eba2c41693074ebf1c32328160a53e

  • Size

    411KB

  • Sample

    241110-zaxs1svdmd

  • MD5

    f72345e19b66c9eacbb31ecf02d9e94e

  • SHA1

    1e2c38b8659b5e50bbfbb64e2f0f56624777060b

  • SHA256

    d9904ae503c6a57524bf88aa0238269267eba2c41693074ebf1c32328160a53e

  • SHA512

    a6d010ef08618a2abce09a8cbb4ff2b65cbe619ac681988d2977c20090c8dff2e8ae1b07b728ef6cae0b4b4f9f59a7c2d173e05703953f330b4f1775feed823a

  • SSDEEP

    6144:WKwDQ4UXE73s4FCu8zli0+mXjA4cz5hb/HH5uixRoKwCrWXZu:3aQ4UXE73slPw4cz5N/HkeRoE/

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      d9904ae503c6a57524bf88aa0238269267eba2c41693074ebf1c32328160a53e

    • Size

      411KB

    • MD5

      f72345e19b66c9eacbb31ecf02d9e94e

    • SHA1

      1e2c38b8659b5e50bbfbb64e2f0f56624777060b

    • SHA256

      d9904ae503c6a57524bf88aa0238269267eba2c41693074ebf1c32328160a53e

    • SHA512

      a6d010ef08618a2abce09a8cbb4ff2b65cbe619ac681988d2977c20090c8dff2e8ae1b07b728ef6cae0b4b4f9f59a7c2d173e05703953f330b4f1775feed823a

    • SSDEEP

      6144:WKwDQ4UXE73s4FCu8zli0+mXjA4cz5hb/HH5uixRoKwCrWXZu:3aQ4UXE73slPw4cz5N/HkeRoE/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks