General

  • Target

    055de3f0a4960212b79bbbd95fa0277a898702219752543287eed735e6b39d0a

  • Size

    318KB

  • Sample

    241111-ch3ynszjax

  • MD5

    f42af35f5aebf10bee3cd5d5753d4cc3

  • SHA1

    326701fc79d80f51c63e2531ca95b722e5ec3994

  • SHA256

    055de3f0a4960212b79bbbd95fa0277a898702219752543287eed735e6b39d0a

  • SHA512

    64d972b723ddf848a9264d70b09075eaa30f6479eab9ce633906f8dec27135657db883635878789ee96d3f1ce13b5b7db2b7f12f55fa3cccb0a5fa927bfa81ae

  • SSDEEP

    6144:gFL5YeNTft07bw4qt5xbRVoquGvEFMFXLX/A6n:01YeNTQbw445xbRiGvE6FbX/j

Malware Config

Extracted

Family

redline

Botnet

ww

C2

45.9.20.168:46257

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      055de3f0a4960212b79bbbd95fa0277a898702219752543287eed735e6b39d0a

    • Size

      318KB

    • MD5

      f42af35f5aebf10bee3cd5d5753d4cc3

    • SHA1

      326701fc79d80f51c63e2531ca95b722e5ec3994

    • SHA256

      055de3f0a4960212b79bbbd95fa0277a898702219752543287eed735e6b39d0a

    • SHA512

      64d972b723ddf848a9264d70b09075eaa30f6479eab9ce633906f8dec27135657db883635878789ee96d3f1ce13b5b7db2b7f12f55fa3cccb0a5fa927bfa81ae

    • SSDEEP

      6144:gFL5YeNTft07bw4qt5xbRVoquGvEFMFXLX/A6n:01YeNTQbw445xbRiGvE6FbX/j

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks