General

  • Target

    6954eb2b8f4ce456b1faa183267938a1

  • Size

    323KB

  • Sample

    241109-y86m5svjar

  • MD5

    6954eb2b8f4ce456b1faa183267938a1

  • SHA1

    d8b2aa1b8a034129d63ed235ac3dfa1d2a629d0c

  • SHA256

    ba042bdd150b7fb1e8600f7b230f7663eed5174cb6f57e15f72b6cf2cc224152

  • SHA512

    f3568905e9d60c6316eb825d87f0904f037dde239c06d67a96293867a585ffc3e697bc9ea5a6c39b7251c2dc48be8d6782885c82cd9bbb04d67d2476b331bd52

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      6954eb2b8f4ce456b1faa183267938a1

    • Size

      323KB

    • MD5

      6954eb2b8f4ce456b1faa183267938a1

    • SHA1

      d8b2aa1b8a034129d63ed235ac3dfa1d2a629d0c

    • SHA256

      ba042bdd150b7fb1e8600f7b230f7663eed5174cb6f57e15f72b6cf2cc224152

    • SHA512

      f3568905e9d60c6316eb825d87f0904f037dde239c06d67a96293867a585ffc3e697bc9ea5a6c39b7251c2dc48be8d6782885c82cd9bbb04d67d2476b331bd52

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks