General

  • Target

    0c62aeafaec8867c28baa623548385278d061ea51977819e0f7e7105de806693

  • Size

    311KB

  • Sample

    241110-2wvlwszpbr

  • MD5

    38f53cf643f5eb3982299ffceeef77d2

  • SHA1

    786700d634a55beaf881a1ee44e3876c6de4f609

  • SHA256

    0c62aeafaec8867c28baa623548385278d061ea51977819e0f7e7105de806693

  • SHA512

    c5c98bb32155106a9959dc666c15d03b2a6a0d51e3e83dc2bf3fe1c5f9ca5aadc524016dfddda5cc83a27cacf1bc559b77e110cb7bcf3b8999e0473c2d59b01a

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      0c62aeafaec8867c28baa623548385278d061ea51977819e0f7e7105de806693

    • Size

      311KB

    • MD5

      38f53cf643f5eb3982299ffceeef77d2

    • SHA1

      786700d634a55beaf881a1ee44e3876c6de4f609

    • SHA256

      0c62aeafaec8867c28baa623548385278d061ea51977819e0f7e7105de806693

    • SHA512

      c5c98bb32155106a9959dc666c15d03b2a6a0d51e3e83dc2bf3fe1c5f9ca5aadc524016dfddda5cc83a27cacf1bc559b77e110cb7bcf3b8999e0473c2d59b01a

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks