General

  • Target

    fbf4e183e913128adc0a4a5eb60e1cdbd34a30c75f6c0e9820e3d7f3c036fe59

  • Size

    427KB

  • Sample

    241111-kapebazmbr

  • MD5

    117e012047a838506a82b1a7de145771

  • SHA1

    93da54268076951ea861f6a6ee5c9831446d860a

  • SHA256

    fbf4e183e913128adc0a4a5eb60e1cdbd34a30c75f6c0e9820e3d7f3c036fe59

  • SHA512

    40b8983dbb896376944c24d0596ba205aa271feeddf996f8183212160966d11f770b5250db5db5f93555cdd9ac83bf367a5e8a2916571168f30bc7b595f7359a

  • SSDEEP

    6144:XxnVbTjtyULhQVfiYUbqBAXdfWe22Yi5/L/ngOBWJfr1PqaRJ0:XxVbsgcinqBAXNT22Yi5/L/n6r1Pq

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.9.20.59:46287

Attributes
  • auth_value

    ec6ada170bcec2e72f0e1f3954547f73

Targets

    • Target

      fbf4e183e913128adc0a4a5eb60e1cdbd34a30c75f6c0e9820e3d7f3c036fe59

    • Size

      427KB

    • MD5

      117e012047a838506a82b1a7de145771

    • SHA1

      93da54268076951ea861f6a6ee5c9831446d860a

    • SHA256

      fbf4e183e913128adc0a4a5eb60e1cdbd34a30c75f6c0e9820e3d7f3c036fe59

    • SHA512

      40b8983dbb896376944c24d0596ba205aa271feeddf996f8183212160966d11f770b5250db5db5f93555cdd9ac83bf367a5e8a2916571168f30bc7b595f7359a

    • SSDEEP

      6144:XxnVbTjtyULhQVfiYUbqBAXdfWe22Yi5/L/ngOBWJfr1PqaRJ0:XxVbsgcinqBAXNT22Yi5/L/n6r1Pq

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks