General

  • Target

    6441cf29dcb3f3b2913e04b35a5ae1d12152d6ef70f068e81f50f2443b1dc3ac

  • Size

    394KB

  • Sample

    241111-b2cedszbjn

  • MD5

    1819b8d23f68d19f57386e90f89a29d6

  • SHA1

    3aabb6b2cc097de9ff7d26cdfc7caa6ed9c1c148

  • SHA256

    6441cf29dcb3f3b2913e04b35a5ae1d12152d6ef70f068e81f50f2443b1dc3ac

  • SHA512

    bcff18310ca1c1706bf78e0e9f295c6d6b7c16b6c65516a03913babb58e41d45830e057d8d4c00ec70407b7eff7db247519ca6f53bcd3968c0c403869bb2f854

  • SSDEEP

    6144:lPi6qmtILCIkpkM6TocNPoK6PoeZWubwJzOPajIJ+ZMabu0xJMan11zA:l6UWLHkp5In8wJkajQ+eVIJMaQ

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      6441cf29dcb3f3b2913e04b35a5ae1d12152d6ef70f068e81f50f2443b1dc3ac

    • Size

      394KB

    • MD5

      1819b8d23f68d19f57386e90f89a29d6

    • SHA1

      3aabb6b2cc097de9ff7d26cdfc7caa6ed9c1c148

    • SHA256

      6441cf29dcb3f3b2913e04b35a5ae1d12152d6ef70f068e81f50f2443b1dc3ac

    • SHA512

      bcff18310ca1c1706bf78e0e9f295c6d6b7c16b6c65516a03913babb58e41d45830e057d8d4c00ec70407b7eff7db247519ca6f53bcd3968c0c403869bb2f854

    • SSDEEP

      6144:lPi6qmtILCIkpkM6TocNPoK6PoeZWubwJzOPajIJ+ZMabu0xJMan11zA:l6UWLHkp5In8wJkajQ+eVIJMaQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks