General

  • Target

    2bc4fcd789e1fe26be5e68d4250e1cc9

  • Size

    313KB

  • Sample

    241110-2wpewaxdpc

  • MD5

    2bc4fcd789e1fe26be5e68d4250e1cc9

  • SHA1

    84eff5c685e3f2af790940471f1cf30f92458db1

  • SHA256

    4715235fe2e1e344755648d4501f78240fbe46b94b900c9751de6f6503303721

  • SHA512

    cde0e8c202b9ea4f4b7c438046e23fdc6fd31fe213ab1b07728a1553092e095104adb7ddaa38db4d72bcc38f0bfc7d46f4c89fef9c0135ec2d9e1d9c1c84c895

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      2bc4fcd789e1fe26be5e68d4250e1cc9

    • Size

      313KB

    • MD5

      2bc4fcd789e1fe26be5e68d4250e1cc9

    • SHA1

      84eff5c685e3f2af790940471f1cf30f92458db1

    • SHA256

      4715235fe2e1e344755648d4501f78240fbe46b94b900c9751de6f6503303721

    • SHA512

      cde0e8c202b9ea4f4b7c438046e23fdc6fd31fe213ab1b07728a1553092e095104adb7ddaa38db4d72bcc38f0bfc7d46f4c89fef9c0135ec2d9e1d9c1c84c895

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks