General

  • Target

    79b6debf610fbd5d36cdaca11b3b110742f8d123

  • Size

    316KB

  • Sample

    241109-2g1vcssqcz

  • MD5

    1bd7278fddc5495afcaf35a4861cf202

  • SHA1

    79b6debf610fbd5d36cdaca11b3b110742f8d123

  • SHA256

    a98fc9f0f7e658b031b9568c564863fb5a2815186ef263b142d4d85ff8df4d48

  • SHA512

    18a0f71c442404f3b3227ecdb58f4b6e8887801ed7c24b2e1d8ca29cabb7b07aa1029dccd9b382b7c647de9ab2bcec64528904c7e9f41ff1b4f29b64e156dbf2

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      79b6debf610fbd5d36cdaca11b3b110742f8d123

    • Size

      316KB

    • MD5

      1bd7278fddc5495afcaf35a4861cf202

    • SHA1

      79b6debf610fbd5d36cdaca11b3b110742f8d123

    • SHA256

      a98fc9f0f7e658b031b9568c564863fb5a2815186ef263b142d4d85ff8df4d48

    • SHA512

      18a0f71c442404f3b3227ecdb58f4b6e8887801ed7c24b2e1d8ca29cabb7b07aa1029dccd9b382b7c647de9ab2bcec64528904c7e9f41ff1b4f29b64e156dbf2

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks