General

  • Target

    cc29cfd860d70b6af6ff334a01387e9801d0b199

  • Size

    310KB

  • Sample

    241109-2zt5jawrhr

  • MD5

    d1a6f69100d68e6313f94f6e1044d943

  • SHA1

    cc29cfd860d70b6af6ff334a01387e9801d0b199

  • SHA256

    9509fbfc78ff8249151d68551ec1ac7e3335ab747f1d715d26a1903c920c470d

  • SHA512

    9b891ad360fc88f3fb05fecdd52dbb39734ce6d26c5198f22f75422319e4ea8bd6912a6e7a0038243995fe5670406294ad5a51ccd9ba517385e24aa34c8465fb

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      cc29cfd860d70b6af6ff334a01387e9801d0b199

    • Size

      310KB

    • MD5

      d1a6f69100d68e6313f94f6e1044d943

    • SHA1

      cc29cfd860d70b6af6ff334a01387e9801d0b199

    • SHA256

      9509fbfc78ff8249151d68551ec1ac7e3335ab747f1d715d26a1903c920c470d

    • SHA512

      9b891ad360fc88f3fb05fecdd52dbb39734ce6d26c5198f22f75422319e4ea8bd6912a6e7a0038243995fe5670406294ad5a51ccd9ba517385e24aa34c8465fb

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks