General

  • Target

    a95deb83683df952463e6879362f8f6024b7df7a535dc301606a3f8ca00fef3d

  • Size

    302KB

  • Sample

    241111-bckpgazalc

  • MD5

    907ef332d95056406c4c172d51839634

  • SHA1

    b732d8e8e235147002b5eee68553f1c144301938

  • SHA256

    a95deb83683df952463e6879362f8f6024b7df7a535dc301606a3f8ca00fef3d

  • SHA512

    3a1135cd37d751adcbd4978cbaf60c869a447a978bace2ad6395456b6223e225d27f94e43d8710a2073792a586961ce445f11155d8cb3de77d8c68faf78ea7f2

  • SSDEEP

    3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      a95deb83683df952463e6879362f8f6024b7df7a535dc301606a3f8ca00fef3d

    • Size

      302KB

    • MD5

      907ef332d95056406c4c172d51839634

    • SHA1

      b732d8e8e235147002b5eee68553f1c144301938

    • SHA256

      a95deb83683df952463e6879362f8f6024b7df7a535dc301606a3f8ca00fef3d

    • SHA512

      3a1135cd37d751adcbd4978cbaf60c869a447a978bace2ad6395456b6223e225d27f94e43d8710a2073792a586961ce445f11155d8cb3de77d8c68faf78ea7f2

    • SSDEEP

      3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks