General

  • Target

    17c1a737288c5c838f7e7b987d80d6f175706d14

  • Size

    310KB

  • Sample

    241110-1hn2hsyngr

  • MD5

    6ae63607cec4d238c46ad2ecb7ee9720

  • SHA1

    17c1a737288c5c838f7e7b987d80d6f175706d14

  • SHA256

    50d8eff08cd1b4bbebbb7c74b66277993de44c1baa356f235bb1fe154e0496fe

  • SHA512

    00d5182a059e723c96c53013d3bd6b118cf522648c7537c4323300be6a59ce7f0da68e04e86ad115aabcca8152c1cdf68fb40a05e26f3536fd218aa3224a381c

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      17c1a737288c5c838f7e7b987d80d6f175706d14

    • Size

      310KB

    • MD5

      6ae63607cec4d238c46ad2ecb7ee9720

    • SHA1

      17c1a737288c5c838f7e7b987d80d6f175706d14

    • SHA256

      50d8eff08cd1b4bbebbb7c74b66277993de44c1baa356f235bb1fe154e0496fe

    • SHA512

      00d5182a059e723c96c53013d3bd6b118cf522648c7537c4323300be6a59ce7f0da68e04e86ad115aabcca8152c1cdf68fb40a05e26f3536fd218aa3224a381c

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks