General

  • Target

    e4ab8252064d1234f6d0c11e99478364849899c41bd697d763a8a0ba68e52e1e

  • Size

    394KB

  • Sample

    241111-czqdxatpck

  • MD5

    7d42dff8eee70b096f248b47fac0f2ae

  • SHA1

    b197e64262f00f38bb7a53621fcd172248df7746

  • SHA256

    e4ab8252064d1234f6d0c11e99478364849899c41bd697d763a8a0ba68e52e1e

  • SHA512

    f3906979e5f936aadd07f410d619c56080df01dcff0c82eebb8665999c42c82a2ebbabd1a334c5b202ab5521057ad89f1dbe9232d1e3226d2397ce7fe3a82bf1

  • SSDEEP

    6144:JvY/hfaNsYeaDDHBYolh5nkRAnlEJa7xwZ124+JXerMchss+x1UkUV:iht/a3HuUMRu7xw7f+h/wss+ck

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      e4ab8252064d1234f6d0c11e99478364849899c41bd697d763a8a0ba68e52e1e

    • Size

      394KB

    • MD5

      7d42dff8eee70b096f248b47fac0f2ae

    • SHA1

      b197e64262f00f38bb7a53621fcd172248df7746

    • SHA256

      e4ab8252064d1234f6d0c11e99478364849899c41bd697d763a8a0ba68e52e1e

    • SHA512

      f3906979e5f936aadd07f410d619c56080df01dcff0c82eebb8665999c42c82a2ebbabd1a334c5b202ab5521057ad89f1dbe9232d1e3226d2397ce7fe3a82bf1

    • SSDEEP

      6144:JvY/hfaNsYeaDDHBYolh5nkRAnlEJa7xwZ124+JXerMchss+x1UkUV:iht/a3HuUMRu7xw7f+h/wss+ck

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks