General

  • Target

    570957e868dea2fd081829a5defda5f2

  • Size

    309KB

  • Sample

    241110-1j6myswdqe

  • MD5

    570957e868dea2fd081829a5defda5f2

  • SHA1

    ccb2d1983cbe076d70e70526b548a21c8cd9623f

  • SHA256

    0ab17b262a25a2e7ad337664b8feff82bac87f86a680dfd58c5499258898f7b4

  • SHA512

    488f23e9a13ffeb529d73d8d3b2244ad4ed03b507e2c8fed40c8bcf0297e77490182c50c7ea04516de64486caee354d10759e98e1313f7a0ea89725fe95caeba

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      570957e868dea2fd081829a5defda5f2

    • Size

      309KB

    • MD5

      570957e868dea2fd081829a5defda5f2

    • SHA1

      ccb2d1983cbe076d70e70526b548a21c8cd9623f

    • SHA256

      0ab17b262a25a2e7ad337664b8feff82bac87f86a680dfd58c5499258898f7b4

    • SHA512

      488f23e9a13ffeb529d73d8d3b2244ad4ed03b507e2c8fed40c8bcf0297e77490182c50c7ea04516de64486caee354d10759e98e1313f7a0ea89725fe95caeba

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks