General

  • Target

    c14e29988b9c219f6a6c1f7bf2d515a47e0240de

  • Size

    312KB

  • Sample

    241110-1v3qfayrcm

  • MD5

    65b43a052b1a56b2f91e533b6386dbd0

  • SHA1

    c14e29988b9c219f6a6c1f7bf2d515a47e0240de

  • SHA256

    5152e2445e124a659ba6dc4722e7927110c2c4b7e8c8c932718012bfae2262de

  • SHA512

    d7e786498c87fece2647cf45d8609e666d6d36af4bb90e01b38b33483c33acd0bf5f05b751e25912b1ee1ef253e0d018c2be6859bade6ac83e836d426ff2d803

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      c14e29988b9c219f6a6c1f7bf2d515a47e0240de

    • Size

      312KB

    • MD5

      65b43a052b1a56b2f91e533b6386dbd0

    • SHA1

      c14e29988b9c219f6a6c1f7bf2d515a47e0240de

    • SHA256

      5152e2445e124a659ba6dc4722e7927110c2c4b7e8c8c932718012bfae2262de

    • SHA512

      d7e786498c87fece2647cf45d8609e666d6d36af4bb90e01b38b33483c33acd0bf5f05b751e25912b1ee1ef253e0d018c2be6859bade6ac83e836d426ff2d803

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks