General

  • Target

    2ce7e76e9e7070879e931033e72720fbb8e14292f6e82c0803e84132d92b0488

  • Size

    410KB

  • Sample

    241111-jfabxavmaz

  • MD5

    7c43a1baaab5fbe629cdb970dd888b83

  • SHA1

    0dae0868d2042fca3ac98a2307683fce0c149646

  • SHA256

    2ce7e76e9e7070879e931033e72720fbb8e14292f6e82c0803e84132d92b0488

  • SHA512

    1d4df9839da591191bac4b9981ea471ecfbf89194b069c6a4f7d89efef13233730ec1442be2cd0073dc86ace0f86a8de016ec2b18f070f069c39f6a3f9d5f0f9

  • SSDEEP

    6144:kMRBC/R6TE/iRAtvdnm4iYVC0dbflCZjmUdhTjMmhIkzHf0KRGGDkTB5wCuPG1:AW6tc4iGCyfIZjmFmikzHf0D0kTFiG

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      2ce7e76e9e7070879e931033e72720fbb8e14292f6e82c0803e84132d92b0488

    • Size

      410KB

    • MD5

      7c43a1baaab5fbe629cdb970dd888b83

    • SHA1

      0dae0868d2042fca3ac98a2307683fce0c149646

    • SHA256

      2ce7e76e9e7070879e931033e72720fbb8e14292f6e82c0803e84132d92b0488

    • SHA512

      1d4df9839da591191bac4b9981ea471ecfbf89194b069c6a4f7d89efef13233730ec1442be2cd0073dc86ace0f86a8de016ec2b18f070f069c39f6a3f9d5f0f9

    • SSDEEP

      6144:kMRBC/R6TE/iRAtvdnm4iYVC0dbflCZjmUdhTjMmhIkzHf0KRGGDkTB5wCuPG1:AW6tc4iGCyfIZjmFmikzHf0D0kTFiG

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks