General

  • Target

    1bd47b79b636f6249405f9b9db7b3a71

  • Size

    321KB

  • Sample

    241109-zn6yva1mew

  • MD5

    1bd47b79b636f6249405f9b9db7b3a71

  • SHA1

    dd7679c5d1beb09650c84b0789658af74d4a9bcc

  • SHA256

    ff73a4c0a1b39db955144ecfbb84f7dd5cdffd126af040e90ecf3b3e32f18c3b

  • SHA512

    1ffea674c34985ea44a6bb1d36d452341a62d5d2da2ebf00864d800fa0d2f6390ec3906eb2b010bd909329d45fba165b5f3314780fcd4615530e400bd20fea59

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      1bd47b79b636f6249405f9b9db7b3a71

    • Size

      321KB

    • MD5

      1bd47b79b636f6249405f9b9db7b3a71

    • SHA1

      dd7679c5d1beb09650c84b0789658af74d4a9bcc

    • SHA256

      ff73a4c0a1b39db955144ecfbb84f7dd5cdffd126af040e90ecf3b3e32f18c3b

    • SHA512

      1ffea674c34985ea44a6bb1d36d452341a62d5d2da2ebf00864d800fa0d2f6390ec3906eb2b010bd909329d45fba165b5f3314780fcd4615530e400bd20fea59

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks