General

  • Target

    3d8c63ca62f7c9c3c5a1acf65fb36b5261ce6c74dd0d9f7156e143bc3d606a6f

  • Size

    369KB

  • Sample

    220120-zepcfabeg8

  • MD5

    74c427100a030bda215b94baffe6f65e

  • SHA1

    f2684ccb2fcd8949a5c78796f5a5b77193c6bac9

  • SHA256

    3d8c63ca62f7c9c3c5a1acf65fb36b5261ce6c74dd0d9f7156e143bc3d606a6f

  • SHA512

    5c4be5b7cff2a0384e70ef3dae32d1a334858afc8b2cf52d560a4b09cc53f5aa0fec0b4559af05508a6700b084d906c3eb16ade038b8cb50852e448d393d8b16

Malware Config

Extracted

Family

redline

Botnet

NONAME

C2

45.9.20.111:1355

Targets

    • Target

      3d8c63ca62f7c9c3c5a1acf65fb36b5261ce6c74dd0d9f7156e143bc3d606a6f

    • Size

      369KB

    • MD5

      74c427100a030bda215b94baffe6f65e

    • SHA1

      f2684ccb2fcd8949a5c78796f5a5b77193c6bac9

    • SHA256

      3d8c63ca62f7c9c3c5a1acf65fb36b5261ce6c74dd0d9f7156e143bc3d606a6f

    • SHA512

      5c4be5b7cff2a0384e70ef3dae32d1a334858afc8b2cf52d560a4b09cc53f5aa0fec0b4559af05508a6700b084d906c3eb16ade038b8cb50852e448d393d8b16

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

MITRE ATT&CK Matrix

Tasks