General

  • Target

    58411877c7e0956f18eefdb39ceaf9f191018e5a5910b081ba2056df063a85af

  • Size

    602KB

  • Sample

    241201-qzcdyasnhx

  • MD5

    4273c611ae8e12f20f481819355e700b

  • SHA1

    e9b253fbdaccac985e6caa3c58b7e63879035360

  • SHA256

    58411877c7e0956f18eefdb39ceaf9f191018e5a5910b081ba2056df063a85af

  • SHA512

    c14c0db537fc4de38cfd4e627432e9ee7e2736caa7e6d92ab1336c6f344fc9b4b15474c7159ebfc729c10ca79dad5f10fb5983f3895c478e5cad71c7f64c2705

  • SSDEEP

    12288:45/dLIlbLM4u7WBCR+IqtUvp+/v3ip8f/bJgO3EtRiqHxrwcPJZhlKO8YRUysUql:47X4u7WBaed/

Malware Config

Extracted

Family

redline

Botnet

ZZZ

C2

5.42.92.74:7175

Targets

    • Target

      58411877c7e0956f18eefdb39ceaf9f191018e5a5910b081ba2056df063a85af

    • Size

      602KB

    • MD5

      4273c611ae8e12f20f481819355e700b

    • SHA1

      e9b253fbdaccac985e6caa3c58b7e63879035360

    • SHA256

      58411877c7e0956f18eefdb39ceaf9f191018e5a5910b081ba2056df063a85af

    • SHA512

      c14c0db537fc4de38cfd4e627432e9ee7e2736caa7e6d92ab1336c6f344fc9b4b15474c7159ebfc729c10ca79dad5f10fb5983f3895c478e5cad71c7f64c2705

    • SSDEEP

      12288:45/dLIlbLM4u7WBCR+IqtUvp+/v3ip8f/bJgO3EtRiqHxrwcPJZhlKO8YRUysUql:47X4u7WBaed/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks