General

  • Target

    67263aa06e8a581f9b1cde9f7d08fd7784268fa5a7d67d98943ead51e9574ef3

  • Size

    433KB

  • Sample

    241111-crn6wazkfw

  • MD5

    a4b07d1d6d336586d3b63c612f3ec361

  • SHA1

    0c05b7586f5dbf82941abe324ee77320ad6a3d0b

  • SHA256

    67263aa06e8a581f9b1cde9f7d08fd7784268fa5a7d67d98943ead51e9574ef3

  • SHA512

    038bb06c0572d9d58205ed27d5ac4836460ce2f68d1f883067c0cb867b876c323565e69bfb7926c17d0e25f0945d65cd8feea9a57d5b8c17e28c1072b2a43d17

  • SSDEEP

    6144:pOR5Bk9cF45s5zJtXXYLE/32/bW7JF3qpDLUwznoFid:c/B4H5WJqLE/6W773qpEwzno4

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      67263aa06e8a581f9b1cde9f7d08fd7784268fa5a7d67d98943ead51e9574ef3

    • Size

      433KB

    • MD5

      a4b07d1d6d336586d3b63c612f3ec361

    • SHA1

      0c05b7586f5dbf82941abe324ee77320ad6a3d0b

    • SHA256

      67263aa06e8a581f9b1cde9f7d08fd7784268fa5a7d67d98943ead51e9574ef3

    • SHA512

      038bb06c0572d9d58205ed27d5ac4836460ce2f68d1f883067c0cb867b876c323565e69bfb7926c17d0e25f0945d65cd8feea9a57d5b8c17e28c1072b2a43d17

    • SSDEEP

      6144:pOR5Bk9cF45s5zJtXXYLE/32/bW7JF3qpDLUwznoFid:c/B4H5WJqLE/6W773qpEwzno4

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks