General

  • Target

    b239eede9a9cb29e3e4d24123131dbc702b6e9db5b280947b112c8d7c294ab07

  • Size

    314KB

  • Sample

    241109-2zbyyswrhk

  • MD5

    39b4b5733edde7fdec3fb29523e4c7ab

  • SHA1

    6c09ad0610afcbb070670021fb8d69292a33dae6

  • SHA256

    b239eede9a9cb29e3e4d24123131dbc702b6e9db5b280947b112c8d7c294ab07

  • SHA512

    73e5a45c481235dc231aa85cf7196f900b2f7ab1a592a7b30c9a6f2250d55cb0da20586e03498d24e28d42548d56a9cf6a094798edc9cf8df066a694b2feaedb

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      b239eede9a9cb29e3e4d24123131dbc702b6e9db5b280947b112c8d7c294ab07

    • Size

      314KB

    • MD5

      39b4b5733edde7fdec3fb29523e4c7ab

    • SHA1

      6c09ad0610afcbb070670021fb8d69292a33dae6

    • SHA256

      b239eede9a9cb29e3e4d24123131dbc702b6e9db5b280947b112c8d7c294ab07

    • SHA512

      73e5a45c481235dc231aa85cf7196f900b2f7ab1a592a7b30c9a6f2250d55cb0da20586e03498d24e28d42548d56a9cf6a094798edc9cf8df066a694b2feaedb

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks