General

  • Target

    8c2c48c342d37c1c04d3cd1341e428f79f692527

  • Size

    307KB

  • Sample

    241110-186n9awfqr

  • MD5

    6552822694d46b77a025f6a7c783e4cf

  • SHA1

    8c2c48c342d37c1c04d3cd1341e428f79f692527

  • SHA256

    78c6a9e0439616cde878fc02e3b5f08efe27511bd150fd1bc54771953390b143

  • SHA512

    17e4c5489e55daf3fa29d5f71fb45fa17b2ab6c78045da4ef6358c4318e0f4d6f84af0403b327fa465117acaf781df7e75e0520e198348c79e7540b2108e0870

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      8c2c48c342d37c1c04d3cd1341e428f79f692527

    • Size

      307KB

    • MD5

      6552822694d46b77a025f6a7c783e4cf

    • SHA1

      8c2c48c342d37c1c04d3cd1341e428f79f692527

    • SHA256

      78c6a9e0439616cde878fc02e3b5f08efe27511bd150fd1bc54771953390b143

    • SHA512

      17e4c5489e55daf3fa29d5f71fb45fa17b2ab6c78045da4ef6358c4318e0f4d6f84af0403b327fa465117acaf781df7e75e0520e198348c79e7540b2108e0870

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks