General

  • Target

    2095ed8f2f379fa410f50469f8676a41636f63f9

  • Size

    323KB

  • Sample

    241110-1g81asyngj

  • MD5

    50163ea469d11759ec08b4153ca01df6

  • SHA1

    2095ed8f2f379fa410f50469f8676a41636f63f9

  • SHA256

    76f5892df6fecc09aba111d41391b0da09f27b0b3e4c182b85383fbac14a086d

  • SHA512

    7bbaa112f37f3df7bf3227fce1786f5f73790a5ba8446c9b2ca89972b6a2e32eed32391e2effb2e7c3a9827ce1f08be3305324e0dc5a7554410dcd861ccfbcd4

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      2095ed8f2f379fa410f50469f8676a41636f63f9

    • Size

      323KB

    • MD5

      50163ea469d11759ec08b4153ca01df6

    • SHA1

      2095ed8f2f379fa410f50469f8676a41636f63f9

    • SHA256

      76f5892df6fecc09aba111d41391b0da09f27b0b3e4c182b85383fbac14a086d

    • SHA512

      7bbaa112f37f3df7bf3227fce1786f5f73790a5ba8446c9b2ca89972b6a2e32eed32391e2effb2e7c3a9827ce1f08be3305324e0dc5a7554410dcd861ccfbcd4

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks