General

  • Target

    91c99b94b0a340554aae7903d76d421eab584b41

  • Size

    309KB

  • Sample

    241110-14sltszkdm

  • MD5

    79acb19d241e562d2382191c37ec626a

  • SHA1

    91c99b94b0a340554aae7903d76d421eab584b41

  • SHA256

    43caa82247c5bec5352a8f1dc3945d8ef7b6de21009a4f9dc7d6481eb7b0cd43

  • SHA512

    f53c4e285007f2c67c5c64b2b393dcd8eac757491981a4c3c508b73c39ad2b6eda391b43e3d45162442640d630f00964c8c7162df8d692e26b113667700e2347

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      91c99b94b0a340554aae7903d76d421eab584b41

    • Size

      309KB

    • MD5

      79acb19d241e562d2382191c37ec626a

    • SHA1

      91c99b94b0a340554aae7903d76d421eab584b41

    • SHA256

      43caa82247c5bec5352a8f1dc3945d8ef7b6de21009a4f9dc7d6481eb7b0cd43

    • SHA512

      f53c4e285007f2c67c5c64b2b393dcd8eac757491981a4c3c508b73c39ad2b6eda391b43e3d45162442640d630f00964c8c7162df8d692e26b113667700e2347

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks