General

  • Target

    d158115d572a26409984be16db7736ba999c8775dbaf3e55b05b2f0d4938ed91N.exe

  • Size

    433KB

  • Sample

    241206-nele1a1jcm

  • MD5

    8f05b3e3f91dba5c66db967a2af6fb10

  • SHA1

    29cdffe8aee285f9d4a6396e384269c67f78a819

  • SHA256

    d158115d572a26409984be16db7736ba999c8775dbaf3e55b05b2f0d4938ed91

  • SHA512

    a01ad3c55438d7dc2f349969f59a49329a1e0e67e1cbe514827462e465905d30f3d734ccb9928609980b6ebc96cfa2c5cdf286ca7c842f158044215195026462

  • SSDEEP

    6144:AdToZq3KGUE6ySWgZk589XDR8JuLLH2PRpm7oio4AylG8Tqpx:KTn4E6y+k58dGQX2PRpm7/o4AD8Tq/

Malware Config

Extracted

Family

redline

Botnet

asia

C2

45.9.20.240:46257

Attributes
  • auth_value

    218353fc70f3440d970e02bf6e2edeb1

Targets

    • Target

      d158115d572a26409984be16db7736ba999c8775dbaf3e55b05b2f0d4938ed91N.exe

    • Size

      433KB

    • MD5

      8f05b3e3f91dba5c66db967a2af6fb10

    • SHA1

      29cdffe8aee285f9d4a6396e384269c67f78a819

    • SHA256

      d158115d572a26409984be16db7736ba999c8775dbaf3e55b05b2f0d4938ed91

    • SHA512

      a01ad3c55438d7dc2f349969f59a49329a1e0e67e1cbe514827462e465905d30f3d734ccb9928609980b6ebc96cfa2c5cdf286ca7c842f158044215195026462

    • SSDEEP

      6144:AdToZq3KGUE6ySWgZk589XDR8JuLLH2PRpm7oio4AylG8Tqpx:KTn4E6y+k58dGQX2PRpm7/o4AD8Tq/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks