General

  • Target

    08c3bae7b869475490fa8f79d84775513a657523fcf17ca3cf7806e43443c69d

  • Size

    446KB

  • Sample

    241111-a41z4aydpj

  • MD5

    a01775d3891bbd3c27f36a0ae7652cba

  • SHA1

    253f838ae1490dee14734136e191f170ea847ede

  • SHA256

    08c3bae7b869475490fa8f79d84775513a657523fcf17ca3cf7806e43443c69d

  • SHA512

    159a47bfeae65bd7ba4275bbc0ef264a5fcf47a199f6650cdb766a7d64a4aeb1472d1cb24489cc98e2f69774b725325312926d5f9ea94751d05322a698c9abe5

  • SSDEEP

    6144:eg+lNH+X9g4imz2aXhFynFk5wrarFSv0Ytn33CXjIi5xLS6xP5Of8CqK:E3vmz2UyO5yarIcc33CTv5xLnxOf

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      08c3bae7b869475490fa8f79d84775513a657523fcf17ca3cf7806e43443c69d

    • Size

      446KB

    • MD5

      a01775d3891bbd3c27f36a0ae7652cba

    • SHA1

      253f838ae1490dee14734136e191f170ea847ede

    • SHA256

      08c3bae7b869475490fa8f79d84775513a657523fcf17ca3cf7806e43443c69d

    • SHA512

      159a47bfeae65bd7ba4275bbc0ef264a5fcf47a199f6650cdb766a7d64a4aeb1472d1cb24489cc98e2f69774b725325312926d5f9ea94751d05322a698c9abe5

    • SSDEEP

      6144:eg+lNH+X9g4imz2aXhFynFk5wrarFSv0Ytn33CXjIi5xLS6xP5Of8CqK:E3vmz2UyO5yarIcc33CTv5xLnxOf

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks