General

  • Target

    0b511103817669b90cb7e03f240c44afb61e5061fbd4c7c5e25113de7ed299f4

  • Size

    314KB

  • Sample

    241110-2x8vxaxdqh

  • MD5

    6f6bb5230eca94afe9a81368b216751e

  • SHA1

    fb5ba80656a3ee0631039120546ea1d46d3d24a8

  • SHA256

    0b511103817669b90cb7e03f240c44afb61e5061fbd4c7c5e25113de7ed299f4

  • SHA512

    f5c41093f00fa1c0434bcf43f1c08a691023b4cda503e86907b5b38d776eb95f5af72ff3f06ebf4413d7b03213e6fcd32a93270e3ae7b7c77d13c9b95c968322

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      0b511103817669b90cb7e03f240c44afb61e5061fbd4c7c5e25113de7ed299f4

    • Size

      314KB

    • MD5

      6f6bb5230eca94afe9a81368b216751e

    • SHA1

      fb5ba80656a3ee0631039120546ea1d46d3d24a8

    • SHA256

      0b511103817669b90cb7e03f240c44afb61e5061fbd4c7c5e25113de7ed299f4

    • SHA512

      f5c41093f00fa1c0434bcf43f1c08a691023b4cda503e86907b5b38d776eb95f5af72ff3f06ebf4413d7b03213e6fcd32a93270e3ae7b7c77d13c9b95c968322

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks