General

  • Target

    abd819003b87b1f5af968d90045db12487f3119edb66204437be56d1a847dd4f

  • Size

    308KB

  • Sample

    241110-15h4sawkey

  • MD5

    afcbbde55f1a36ebb11c50a1f46fe140

  • SHA1

    7bfbb2efd657277b8c6c1c7888ae1ec17ba48dbe

  • SHA256

    abd819003b87b1f5af968d90045db12487f3119edb66204437be56d1a847dd4f

  • SHA512

    53fe2e90981ca42a9ad13837ec6e68457a883a642db09c6e5e76ef4bca3130504116cf5a9f932340b660a0417279b258512e8034e959ad7656d7ebec07c8aa63

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      abd819003b87b1f5af968d90045db12487f3119edb66204437be56d1a847dd4f

    • Size

      308KB

    • MD5

      afcbbde55f1a36ebb11c50a1f46fe140

    • SHA1

      7bfbb2efd657277b8c6c1c7888ae1ec17ba48dbe

    • SHA256

      abd819003b87b1f5af968d90045db12487f3119edb66204437be56d1a847dd4f

    • SHA512

      53fe2e90981ca42a9ad13837ec6e68457a883a642db09c6e5e76ef4bca3130504116cf5a9f932340b660a0417279b258512e8034e959ad7656d7ebec07c8aa63

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks