General

  • Target

    a4de8a5e3775521a6b82c40255acaea72a61724ddb26e4714bf6eeea60984faa

  • Size

    330KB

  • Sample

    241110-14jzpazkdk

  • MD5

    545b0d05d40490104d869155328a3a03

  • SHA1

    46c90c8a093dbd0723c9c63a055bce8a37a9750c

  • SHA256

    a4de8a5e3775521a6b82c40255acaea72a61724ddb26e4714bf6eeea60984faa

  • SHA512

    ed184fc2b8e70096dfa0759f41425045d4f206277a69a249235e0a29092aca2c5b333728f6471a4e14f65defcd16ec9266a81e31cc5f39878181223c31f407c8

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      a4de8a5e3775521a6b82c40255acaea72a61724ddb26e4714bf6eeea60984faa

    • Size

      330KB

    • MD5

      545b0d05d40490104d869155328a3a03

    • SHA1

      46c90c8a093dbd0723c9c63a055bce8a37a9750c

    • SHA256

      a4de8a5e3775521a6b82c40255acaea72a61724ddb26e4714bf6eeea60984faa

    • SHA512

      ed184fc2b8e70096dfa0759f41425045d4f206277a69a249235e0a29092aca2c5b333728f6471a4e14f65defcd16ec9266a81e31cc5f39878181223c31f407c8

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks