General

  • Target

    e6c421293d9acf3aae1f50b67e1dd1ea

  • Size

    314KB

  • Sample

    241110-148ytawfjn

  • MD5

    e6c421293d9acf3aae1f50b67e1dd1ea

  • SHA1

    2528b770cae03cd0522b524308d9ba584556b992

  • SHA256

    8374b75dd5b50eb2d050888fe93c61a6f0a2742b7269630b603eff7ee5e5072c

  • SHA512

    c3fdbeb4954266b3672f8a99a4c204a1303e5d06da77f8ff021cb895f78aa8bebed4b3425190f2c8879a4a17bd13937e64bffc907c260a48d5db3808668eecff

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      e6c421293d9acf3aae1f50b67e1dd1ea

    • Size

      314KB

    • MD5

      e6c421293d9acf3aae1f50b67e1dd1ea

    • SHA1

      2528b770cae03cd0522b524308d9ba584556b992

    • SHA256

      8374b75dd5b50eb2d050888fe93c61a6f0a2742b7269630b603eff7ee5e5072c

    • SHA512

      c3fdbeb4954266b3672f8a99a4c204a1303e5d06da77f8ff021cb895f78aa8bebed4b3425190f2c8879a4a17bd13937e64bffc907c260a48d5db3808668eecff

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks