General

  • Target

    97af1a0a3d962fb6ba3ba27434dc87af

  • Size

    311KB

  • Sample

    241110-2latqsxcnh

  • MD5

    97af1a0a3d962fb6ba3ba27434dc87af

  • SHA1

    dfd77a3379c0feedc4c97e691e026b4949148193

  • SHA256

    c25b6afb75a96b6dd5ce8a910a4d436c5e4803dfc636f8eb37a0d940d04f137e

  • SHA512

    93bcace1f0c220e3fc9b12887b07c3ba56575e260a5066b5410f7a21354fc02d9ce4defa65737f1997628c16969287c27b12693b0fdb45791b33e1bb1959ade7

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      97af1a0a3d962fb6ba3ba27434dc87af

    • Size

      311KB

    • MD5

      97af1a0a3d962fb6ba3ba27434dc87af

    • SHA1

      dfd77a3379c0feedc4c97e691e026b4949148193

    • SHA256

      c25b6afb75a96b6dd5ce8a910a4d436c5e4803dfc636f8eb37a0d940d04f137e

    • SHA512

      93bcace1f0c220e3fc9b12887b07c3ba56575e260a5066b5410f7a21354fc02d9ce4defa65737f1997628c16969287c27b12693b0fdb45791b33e1bb1959ade7

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks