General

  • Target

    012a46819fd2d6b5ad5ce76baaf50e0364e16478

  • Size

    313KB

  • Sample

    241109-m1m1aawkgr

  • MD5

    700735e1d083f31c16ee7c81ed59c1d7

  • SHA1

    012a46819fd2d6b5ad5ce76baaf50e0364e16478

  • SHA256

    ef4df208b5e4f24766a2f2a84a2d6b8d84751aad8d57ec325e43bdb100ded00d

  • SHA512

    83067a68b7006a655e6c4ecfc3be46816b5a212ab9b55a455315754700b0cd87e9ca5294468f11e43c545ae4b4837857867164ba149a911b852e2baa8c7e3ea3

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      012a46819fd2d6b5ad5ce76baaf50e0364e16478

    • Size

      313KB

    • MD5

      700735e1d083f31c16ee7c81ed59c1d7

    • SHA1

      012a46819fd2d6b5ad5ce76baaf50e0364e16478

    • SHA256

      ef4df208b5e4f24766a2f2a84a2d6b8d84751aad8d57ec325e43bdb100ded00d

    • SHA512

      83067a68b7006a655e6c4ecfc3be46816b5a212ab9b55a455315754700b0cd87e9ca5294468f11e43c545ae4b4837857867164ba149a911b852e2baa8c7e3ea3

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks