General

  • Target

    98e0722e84f40f8d7c219c746e26fcab40ccab79761379795322b69c16b54f67

  • Size

    273KB

  • Sample

    241111-mqz7vsyaqn

  • MD5

    13eceece86b19cc573202768c728bd6d

  • SHA1

    8af8ece74dd79a8a0ca97c0f35be5ad26a59b40d

  • SHA256

    98e0722e84f40f8d7c219c746e26fcab40ccab79761379795322b69c16b54f67

  • SHA512

    2c561c11bb6f894951c5ff50e641705459b50896aff552f55675e08f625445d9f26e2dd486636355ad55f053305ebdf61e686058b76236a04450e44754dc710d

  • SSDEEP

    6144:h8qL1OPqNLpBmk+fF1FhLeVLvNE8qifYqui4nB:eqcPqNLLm1FxeV7y8FKzn

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      98e0722e84f40f8d7c219c746e26fcab40ccab79761379795322b69c16b54f67

    • Size

      273KB

    • MD5

      13eceece86b19cc573202768c728bd6d

    • SHA1

      8af8ece74dd79a8a0ca97c0f35be5ad26a59b40d

    • SHA256

      98e0722e84f40f8d7c219c746e26fcab40ccab79761379795322b69c16b54f67

    • SHA512

      2c561c11bb6f894951c5ff50e641705459b50896aff552f55675e08f625445d9f26e2dd486636355ad55f053305ebdf61e686058b76236a04450e44754dc710d

    • SSDEEP

      6144:h8qL1OPqNLpBmk+fF1FhLeVLvNE8qifYqui4nB:eqcPqNLLm1FxeV7y8FKzn

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks