General

  • Target

    cab09e096b26924118fcc603384c728db99319de

  • Size

    310KB

  • Sample

    241110-1qdkrayqbq

  • MD5

    3476cc41944a8ee6241962520da0fa89

  • SHA1

    cab09e096b26924118fcc603384c728db99319de

  • SHA256

    3145518a2303ccb903bd71bcd852fe8f91c40a629192444dd02e7f0ac35d6cce

  • SHA512

    f752ddfde7fcdc855916850773cc9833fa1c0a9f6d056c23aa2a970cfe0a21b58343632f298a18124a2f296e1d452e392d54942940c09c51f5199501943b43dd

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      cab09e096b26924118fcc603384c728db99319de

    • Size

      310KB

    • MD5

      3476cc41944a8ee6241962520da0fa89

    • SHA1

      cab09e096b26924118fcc603384c728db99319de

    • SHA256

      3145518a2303ccb903bd71bcd852fe8f91c40a629192444dd02e7f0ac35d6cce

    • SHA512

      f752ddfde7fcdc855916850773cc9833fa1c0a9f6d056c23aa2a970cfe0a21b58343632f298a18124a2f296e1d452e392d54942940c09c51f5199501943b43dd

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks