General

  • Target

    7dc8e866798fee7e9cb8c8c2e4fedf2782f2257ad659e5c6a55246052a90ff95

  • Size

    432KB

  • Sample

    241111-a6x18asjeq

  • MD5

    cc365907c5d4a8cd31041faa837e1107

  • SHA1

    dd241f17a6b3242ae011e49f7cce40d9cd5d5f3a

  • SHA256

    7dc8e866798fee7e9cb8c8c2e4fedf2782f2257ad659e5c6a55246052a90ff95

  • SHA512

    227c5ecff1c53f20db5c3aea95df165407b70d9dc5baaeb496e9a04f341d8aa034768d7bf41154acf0d7ab5ef91bcd18d58ceab1b4a2b4d30eeeb27e8d1fa70f

  • SSDEEP

    6144:yGO9Zbg+pdyt8LlZuPpTOl2eV7pw5fq22bM0harV83KpzZWK3g2tF0:VO91g+pdytWZucV2E3harS3KpMK3g2T

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      7dc8e866798fee7e9cb8c8c2e4fedf2782f2257ad659e5c6a55246052a90ff95

    • Size

      432KB

    • MD5

      cc365907c5d4a8cd31041faa837e1107

    • SHA1

      dd241f17a6b3242ae011e49f7cce40d9cd5d5f3a

    • SHA256

      7dc8e866798fee7e9cb8c8c2e4fedf2782f2257ad659e5c6a55246052a90ff95

    • SHA512

      227c5ecff1c53f20db5c3aea95df165407b70d9dc5baaeb496e9a04f341d8aa034768d7bf41154acf0d7ab5ef91bcd18d58ceab1b4a2b4d30eeeb27e8d1fa70f

    • SSDEEP

      6144:yGO9Zbg+pdyt8LlZuPpTOl2eV7pw5fq22bM0harV83KpzZWK3g2tF0:VO91g+pdytWZucV2E3harS3KpMK3g2T

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks