General

  • Target

    a596b98fae59e17484a8aee0a4661b3aa0e24e792113c046b2b09a6da7f61ba1

  • Size

    313KB

  • Sample

    241110-2prxesxdjg

  • MD5

    9331526b2e7e2e10a653d7895f7a171e

  • SHA1

    735ec78b03781107ff4bf6ab93a2c6853a146245

  • SHA256

    a596b98fae59e17484a8aee0a4661b3aa0e24e792113c046b2b09a6da7f61ba1

  • SHA512

    10fdddd115bc45d992c951e3be2a145ed96867e5cd206c8151e630cddf95e1491cf51addbd51fb67893fee2bfd2138dbe89486b534fc07e1b1d4be03fa8b7d8d

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      a596b98fae59e17484a8aee0a4661b3aa0e24e792113c046b2b09a6da7f61ba1

    • Size

      313KB

    • MD5

      9331526b2e7e2e10a653d7895f7a171e

    • SHA1

      735ec78b03781107ff4bf6ab93a2c6853a146245

    • SHA256

      a596b98fae59e17484a8aee0a4661b3aa0e24e792113c046b2b09a6da7f61ba1

    • SHA512

      10fdddd115bc45d992c951e3be2a145ed96867e5cd206c8151e630cddf95e1491cf51addbd51fb67893fee2bfd2138dbe89486b534fc07e1b1d4be03fa8b7d8d

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks