General

  • Target

    465924a093613aed580abad7b0321c8f9e4fed4eac0558c3f6efd1002758378c

  • Size

    434KB

  • Sample

    241111-cqq9vatmbn

  • MD5

    4e7c956e5e2932e98c8aea8c5ed75ea6

  • SHA1

    9b8d01bfbbcbe9eefc9567d1f89d78c56182ae50

  • SHA256

    465924a093613aed580abad7b0321c8f9e4fed4eac0558c3f6efd1002758378c

  • SHA512

    efd934792690672e623ea6118474c345916640687a6adefd37597276b639619cac5e968d9e5bf068cc077bb2a12099c4ae814f30a707a212993a6d76f444d1fe

  • SSDEEP

    6144:z6b0HLLvfYOGa7hFs+TMrSwRoSIPbYVMoNr/psoF3736O1GdkT3TBNht:b6avJMvoS6bgMoNr/psoFr36O+kT3F

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      465924a093613aed580abad7b0321c8f9e4fed4eac0558c3f6efd1002758378c

    • Size

      434KB

    • MD5

      4e7c956e5e2932e98c8aea8c5ed75ea6

    • SHA1

      9b8d01bfbbcbe9eefc9567d1f89d78c56182ae50

    • SHA256

      465924a093613aed580abad7b0321c8f9e4fed4eac0558c3f6efd1002758378c

    • SHA512

      efd934792690672e623ea6118474c345916640687a6adefd37597276b639619cac5e968d9e5bf068cc077bb2a12099c4ae814f30a707a212993a6d76f444d1fe

    • SSDEEP

      6144:z6b0HLLvfYOGa7hFs+TMrSwRoSIPbYVMoNr/psoF3736O1GdkT3TBNht:b6avJMvoS6bgMoNr/psoFr36O+kT3F

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks