General

  • Target

    d60ae2b79f33655e76007d85817e655705c64998f671ceef0fcd5a66bbc6d157

  • Size

    306KB

  • Sample

    241110-1qn2gswbrq

  • MD5

    bfeb4ed4b72f8d6627fde4fac7155874

  • SHA1

    27cfed6b96b4280e736a4f12e40c8c10de6c23b0

  • SHA256

    d60ae2b79f33655e76007d85817e655705c64998f671ceef0fcd5a66bbc6d157

  • SHA512

    bcf44067f3f27b7a3f54c8b8e11b318b73db005205e46d08ffa6d89901759c4d3d49e39f262c281bfa4d42df5d3e968be619e598eb315863d3ceddc53fdb7d87

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      d60ae2b79f33655e76007d85817e655705c64998f671ceef0fcd5a66bbc6d157

    • Size

      306KB

    • MD5

      bfeb4ed4b72f8d6627fde4fac7155874

    • SHA1

      27cfed6b96b4280e736a4f12e40c8c10de6c23b0

    • SHA256

      d60ae2b79f33655e76007d85817e655705c64998f671ceef0fcd5a66bbc6d157

    • SHA512

      bcf44067f3f27b7a3f54c8b8e11b318b73db005205e46d08ffa6d89901759c4d3d49e39f262c281bfa4d42df5d3e968be619e598eb315863d3ceddc53fdb7d87

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks