General

  • Target

    39c441a31f5520b92c1a73c523114665

  • Size

    321KB

  • Sample

    241110-18rkbswfql

  • MD5

    39c441a31f5520b92c1a73c523114665

  • SHA1

    1fccc886c364e3f5257c8abd8a1ced0624e543c4

  • SHA256

    48573a8f7dbc5054492025800d350f5083d0bfabab52139744644b378e04a109

  • SHA512

    eb2f0411fa97c10eca239c0fcf01aae926c7b083a4a94fdba24d1e1f32cb7c8bb4f3a71057971a6268b82ccd1c16111502b84090700fb743a220a3a44aee1637

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      39c441a31f5520b92c1a73c523114665

    • Size

      321KB

    • MD5

      39c441a31f5520b92c1a73c523114665

    • SHA1

      1fccc886c364e3f5257c8abd8a1ced0624e543c4

    • SHA256

      48573a8f7dbc5054492025800d350f5083d0bfabab52139744644b378e04a109

    • SHA512

      eb2f0411fa97c10eca239c0fcf01aae926c7b083a4a94fdba24d1e1f32cb7c8bb4f3a71057971a6268b82ccd1c16111502b84090700fb743a220a3a44aee1637

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks