General

  • Target

    df99ddd18504fe79c988c1b212826a3ac34b37c8f9651151841ff0638f1028b7

  • Size

    411KB

  • Sample

    241111-c678as1enb

  • MD5

    0ccf37feac51b85c2adcc0fed8597fdf

  • SHA1

    b338167ee881d71f79ecd1ddc863db9e9332d6ed

  • SHA256

    df99ddd18504fe79c988c1b212826a3ac34b37c8f9651151841ff0638f1028b7

  • SHA512

    c4fc90ec0f514278b55799cb90c4797f5a8f9c16fe67543fb6fe28c883441ea6b56e2e9efde9ef4fd55988bfdf0efdc42e23ce1c9ff33dc5e05b317a9c739569

  • SSDEEP

    12288:QOHOqFFCzvGUHZ1olS7wAxlSoEYInaHqL:nFHW/4SioEYfKL

Malware Config

Extracted

Family

redline

Botnet

170

C2

45.9.20.240:46257

Attributes
  • auth_value

    73f905977a8199ea3d396a0a7d0ae6c8

Targets

    • Target

      df99ddd18504fe79c988c1b212826a3ac34b37c8f9651151841ff0638f1028b7

    • Size

      411KB

    • MD5

      0ccf37feac51b85c2adcc0fed8597fdf

    • SHA1

      b338167ee881d71f79ecd1ddc863db9e9332d6ed

    • SHA256

      df99ddd18504fe79c988c1b212826a3ac34b37c8f9651151841ff0638f1028b7

    • SHA512

      c4fc90ec0f514278b55799cb90c4797f5a8f9c16fe67543fb6fe28c883441ea6b56e2e9efde9ef4fd55988bfdf0efdc42e23ce1c9ff33dc5e05b317a9c739569

    • SSDEEP

      12288:QOHOqFFCzvGUHZ1olS7wAxlSoEYInaHqL:nFHW/4SioEYfKL

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks