General

  • Target

    0b1119436acb5af8a6df89bb19dc31af9d6c7b3f1492765d0484947af7d5a4ae

  • Size

    423KB

  • Sample

    241111-lxrzds1lgn

  • MD5

    126a4d2e7544d070180638d471ee7c44

  • SHA1

    9dc335e47324545b81cb69c3bb1a0dd3d8d6b902

  • SHA256

    0b1119436acb5af8a6df89bb19dc31af9d6c7b3f1492765d0484947af7d5a4ae

  • SHA512

    4f661a0ed8a26ab88fd2513557555aa5a95513918004a4402b977725a0b8e9ec3e956894f911cfafa84a27038fe1a1aa1dcf948ae71051e1eda28bd5a9ee5f6f

  • SSDEEP

    6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      0b1119436acb5af8a6df89bb19dc31af9d6c7b3f1492765d0484947af7d5a4ae

    • Size

      423KB

    • MD5

      126a4d2e7544d070180638d471ee7c44

    • SHA1

      9dc335e47324545b81cb69c3bb1a0dd3d8d6b902

    • SHA256

      0b1119436acb5af8a6df89bb19dc31af9d6c7b3f1492765d0484947af7d5a4ae

    • SHA512

      4f661a0ed8a26ab88fd2513557555aa5a95513918004a4402b977725a0b8e9ec3e956894f911cfafa84a27038fe1a1aa1dcf948ae71051e1eda28bd5a9ee5f6f

    • SSDEEP

      6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks