General

  • Target

    24972c9b167c9b34951e606004ab8d5c

  • Size

    315KB

  • Sample

    241109-zcdg6a1hqe

  • MD5

    24972c9b167c9b34951e606004ab8d5c

  • SHA1

    721484b14ffc47a30e05db22302a3bbe1a3d2068

  • SHA256

    9e1637b0bb9c19594fd9128bf5c1273642ee29cfaebc2056cdf5a65a440d8017

  • SHA512

    3c1036863526264f7e0fac2233997252a9d99d3babdf2e6b2fe71e4fcc32b20123ac9385b404e2994e53246ec6193966409cb9ccd159f7ea262d5583093482c0

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      24972c9b167c9b34951e606004ab8d5c

    • Size

      315KB

    • MD5

      24972c9b167c9b34951e606004ab8d5c

    • SHA1

      721484b14ffc47a30e05db22302a3bbe1a3d2068

    • SHA256

      9e1637b0bb9c19594fd9128bf5c1273642ee29cfaebc2056cdf5a65a440d8017

    • SHA512

      3c1036863526264f7e0fac2233997252a9d99d3babdf2e6b2fe71e4fcc32b20123ac9385b404e2994e53246ec6193966409cb9ccd159f7ea262d5583093482c0

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks