General

  • Target

    06dfdbf3368edea84ba38fda576df537d11df5b076f6436e93138375a57f74db

  • Size

    302KB

  • Sample

    241111-k1wajswmcs

  • MD5

    05305fed3474a3710c205c60404b3967

  • SHA1

    d9736f7357fe82d9a6d845b65f6406673dfae6f7

  • SHA256

    06dfdbf3368edea84ba38fda576df537d11df5b076f6436e93138375a57f74db

  • SHA512

    801f7c45ddefbea90230cca2551ae36a024e222a444bd53f08f8392a2f1f6e8372aac36e0a40ee2cdb5152b6b62be9e1fcf97d3c814bf347c0eafa78521632c4

  • SSDEEP

    3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ

Malware Config

Extracted

Family

redline

Botnet

11

C2

45.9.20.157:46257

Attributes
  • auth_value

    344c26d7f808f9c29e47633026f19aa5

Targets

    • Target

      06dfdbf3368edea84ba38fda576df537d11df5b076f6436e93138375a57f74db

    • Size

      302KB

    • MD5

      05305fed3474a3710c205c60404b3967

    • SHA1

      d9736f7357fe82d9a6d845b65f6406673dfae6f7

    • SHA256

      06dfdbf3368edea84ba38fda576df537d11df5b076f6436e93138375a57f74db

    • SHA512

      801f7c45ddefbea90230cca2551ae36a024e222a444bd53f08f8392a2f1f6e8372aac36e0a40ee2cdb5152b6b62be9e1fcf97d3c814bf347c0eafa78521632c4

    • SSDEEP

      3072:l8XLArFsh796WIYCt9ouTDXV1lIYNbMFjwBc5wbfRny9F4znqpN1tT+3QcxH2ocC:lpCTw9ouTDljIYpcwcgCm2Z7AiC6SQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks