General

  • Target

    df21c41eee600446c6daced2451e7be088907b48015a9f0bcb38f50c1718f03c

  • Size

    302KB

  • Sample

    241111-gdahsavaqf

  • MD5

    996ee196834fd5ef7761001c052207cd

  • SHA1

    7a17e288c30b332de3b63b2c1c915faa0b2cc3c0

  • SHA256

    df21c41eee600446c6daced2451e7be088907b48015a9f0bcb38f50c1718f03c

  • SHA512

    11e19edc35b16e83cb16a25f31f5eefd999a201568866e8ceefbe1973fff83bb28fb2e37068d5d84dfed9baa3cd41efee238f45ce6fcdbe7dccce31005dff237

  • SSDEEP

    3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      df21c41eee600446c6daced2451e7be088907b48015a9f0bcb38f50c1718f03c

    • Size

      302KB

    • MD5

      996ee196834fd5ef7761001c052207cd

    • SHA1

      7a17e288c30b332de3b63b2c1c915faa0b2cc3c0

    • SHA256

      df21c41eee600446c6daced2451e7be088907b48015a9f0bcb38f50c1718f03c

    • SHA512

      11e19edc35b16e83cb16a25f31f5eefd999a201568866e8ceefbe1973fff83bb28fb2e37068d5d84dfed9baa3cd41efee238f45ce6fcdbe7dccce31005dff237

    • SSDEEP

      3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks