General

  • Target

    68ef8d3270c16bfe78b8de22a9d9e65ad4d7ba909eaf0786ead3c5aed55eb4bd

  • Size

    298KB

  • Sample

    241104-zhrlzaxama

  • MD5

    5b763a42746ee7a68cabecdcf3760f99

  • SHA1

    9e1a25f3228b1805097998669b2304ae6f45a4b0

  • SHA256

    68ef8d3270c16bfe78b8de22a9d9e65ad4d7ba909eaf0786ead3c5aed55eb4bd

  • SHA512

    aaeaba466780a84523c2aa2a3d59f33b17083673b49b55abe46c106ebf8c6d91f86a44adc62fcf9bbb8db66f517ccb7d35a4cef576ebaf0bd3f0b5dda8382d64

  • SSDEEP

    6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      68ef8d3270c16bfe78b8de22a9d9e65ad4d7ba909eaf0786ead3c5aed55eb4bd

    • Size

      298KB

    • MD5

      5b763a42746ee7a68cabecdcf3760f99

    • SHA1

      9e1a25f3228b1805097998669b2304ae6f45a4b0

    • SHA256

      68ef8d3270c16bfe78b8de22a9d9e65ad4d7ba909eaf0786ead3c5aed55eb4bd

    • SHA512

      aaeaba466780a84523c2aa2a3d59f33b17083673b49b55abe46c106ebf8c6d91f86a44adc62fcf9bbb8db66f517ccb7d35a4cef576ebaf0bd3f0b5dda8382d64

    • SSDEEP

      6144:52ECIjjW+LuLIe0T1eXwp8bXk3X4G1cmL2Gp2eT:5FCIjjW6vTHcmLxAe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks