General

  • Target

    e21ad8c0ed2eb48cbd69bbc17366cdc6

  • Size

    323KB

  • Sample

    241109-1k3bxswjer

  • MD5

    e21ad8c0ed2eb48cbd69bbc17366cdc6

  • SHA1

    c419b8a9c99edad3477668539ffee8e8f6c779db

  • SHA256

    9091855f310a2a6db976559031085d70d56fa2817cba76e342e95ece8d0d57a1

  • SHA512

    cec825f2283d42c2d6f523b83782826f9807bd6883c514416ee14e2f772effb44de0a4bd8e1081db24806dc176c716c69af5b9f5b75b85b6f276c8ee9cdc1f78

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      e21ad8c0ed2eb48cbd69bbc17366cdc6

    • Size

      323KB

    • MD5

      e21ad8c0ed2eb48cbd69bbc17366cdc6

    • SHA1

      c419b8a9c99edad3477668539ffee8e8f6c779db

    • SHA256

      9091855f310a2a6db976559031085d70d56fa2817cba76e342e95ece8d0d57a1

    • SHA512

      cec825f2283d42c2d6f523b83782826f9807bd6883c514416ee14e2f772effb44de0a4bd8e1081db24806dc176c716c69af5b9f5b75b85b6f276c8ee9cdc1f78

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks