General

  • Target

    ea731507f550353e16c76b2776c8467e

  • Size

    315KB

  • Sample

    241110-2bbnaazlfj

  • MD5

    ea731507f550353e16c76b2776c8467e

  • SHA1

    a2fd89d93ca71dc845cf1f8fde8c5ce42c1fba53

  • SHA256

    e3bbb9f50c6448caf53ec218cc501d8760c8b63893f1564cd8f50eaf3c563185

  • SHA512

    f0a8f4954c7a0a67a50cdca1ef103e58018a2ab319c4e11750adf6ef8edfba6b8ff3210ed9d7d8608666b3ebac6b9c5621cf8999d3653793c189eff00a4f3b31

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      ea731507f550353e16c76b2776c8467e

    • Size

      315KB

    • MD5

      ea731507f550353e16c76b2776c8467e

    • SHA1

      a2fd89d93ca71dc845cf1f8fde8c5ce42c1fba53

    • SHA256

      e3bbb9f50c6448caf53ec218cc501d8760c8b63893f1564cd8f50eaf3c563185

    • SHA512

      f0a8f4954c7a0a67a50cdca1ef103e58018a2ab319c4e11750adf6ef8edfba6b8ff3210ed9d7d8608666b3ebac6b9c5621cf8999d3653793c189eff00a4f3b31

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks