General

  • Target

    7fd9df070b93affed05a0c82289ccb416556570dad4072c7d5629e222471df27

  • Size

    411KB

  • Sample

    241111-bxap1azakk

  • MD5

    4ebcceb62dbca7aae973deaf325681b0

  • SHA1

    66dc45c2b9057f1e0007900c5118e211e40dee4a

  • SHA256

    7fd9df070b93affed05a0c82289ccb416556570dad4072c7d5629e222471df27

  • SHA512

    e9d734a5f44fc7c2dbabe0ea1312ac6871dee824614c849734225e58d086a093a16560fac00ee5ed571df7f8e40e0af8bca788fb89f774017ed0335c8eb3c4be

  • SSDEEP

    6144:WKwDQ4UXE73s4FCu8zli0+mXjA4cz5hb/HH5uixRoKwCrWXZu:3aQ4UXE73slPw4cz5N/HkeRoE/

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      7fd9df070b93affed05a0c82289ccb416556570dad4072c7d5629e222471df27

    • Size

      411KB

    • MD5

      4ebcceb62dbca7aae973deaf325681b0

    • SHA1

      66dc45c2b9057f1e0007900c5118e211e40dee4a

    • SHA256

      7fd9df070b93affed05a0c82289ccb416556570dad4072c7d5629e222471df27

    • SHA512

      e9d734a5f44fc7c2dbabe0ea1312ac6871dee824614c849734225e58d086a093a16560fac00ee5ed571df7f8e40e0af8bca788fb89f774017ed0335c8eb3c4be

    • SSDEEP

      6144:WKwDQ4UXE73s4FCu8zli0+mXjA4cz5hb/HH5uixRoKwCrWXZu:3aQ4UXE73slPw4cz5N/HkeRoE/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks