General

  • Target

    5c554ace9cc8621c2add7b8a9b475a6f18df64d8

  • Size

    305KB

  • Sample

    241110-1m6r5avqay

  • MD5

    d46e6ef258e1e90c9ac048a3c407dff4

  • SHA1

    5c554ace9cc8621c2add7b8a9b475a6f18df64d8

  • SHA256

    db857c2a75feed7c5946e448882210b2c9ccc4fab2392e96a9555c8430230fb2

  • SHA512

    817b03d44273d87602efdc239d55b2263076bd385458f99a4ab3cca1d6a22554ffa644ebf64e6f68e4d6bf6dfcb90697818d2425cab8e42927c2ef7d58b5e3a4

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      5c554ace9cc8621c2add7b8a9b475a6f18df64d8

    • Size

      305KB

    • MD5

      d46e6ef258e1e90c9ac048a3c407dff4

    • SHA1

      5c554ace9cc8621c2add7b8a9b475a6f18df64d8

    • SHA256

      db857c2a75feed7c5946e448882210b2c9ccc4fab2392e96a9555c8430230fb2

    • SHA512

      817b03d44273d87602efdc239d55b2263076bd385458f99a4ab3cca1d6a22554ffa644ebf64e6f68e4d6bf6dfcb90697818d2425cab8e42927c2ef7d58b5e3a4

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks