General

  • Target

    191c78a91f59b89abd2be670d33b094b174d6ec530a5e365e7bd6717a8f493e5

  • Size

    423KB

  • Sample

    241104-zbmpfawhle

  • MD5

    e6d81490b7bd5e3e87b11c9f1b00a2f7

  • SHA1

    a6fafcce8b38d36b5121c2e4681353f6352a29f6

  • SHA256

    191c78a91f59b89abd2be670d33b094b174d6ec530a5e365e7bd6717a8f493e5

  • SHA512

    9ae08da3d9b96d768eef924b3f955b5304b8183bc49d0482f8a9467321345e65298c153d4de965bcaddd6c01b9ebb5c1617caf0d27b2e7fbc4931e4a89cc6eb3

  • SSDEEP

    6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      191c78a91f59b89abd2be670d33b094b174d6ec530a5e365e7bd6717a8f493e5

    • Size

      423KB

    • MD5

      e6d81490b7bd5e3e87b11c9f1b00a2f7

    • SHA1

      a6fafcce8b38d36b5121c2e4681353f6352a29f6

    • SHA256

      191c78a91f59b89abd2be670d33b094b174d6ec530a5e365e7bd6717a8f493e5

    • SHA512

      9ae08da3d9b96d768eef924b3f955b5304b8183bc49d0482f8a9467321345e65298c153d4de965bcaddd6c01b9ebb5c1617caf0d27b2e7fbc4931e4a89cc6eb3

    • SSDEEP

      6144:XQ5ARa6ocV7kZpW6LX3Y0BxY3e2zGM/4MYmrgkN+k0DLltf3qefeh:XQORZhkZ8w3FBx2aVMYmrgkN+kgtf3

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks