General

  • Target

    1c2d54e55be2351a01b06ee68812334534b01347

  • Size

    308KB

  • Sample

    241110-31y1js1lfr

  • MD5

    7c2a9355e41785c4a6e7ca7b891545d4

  • SHA1

    1c2d54e55be2351a01b06ee68812334534b01347

  • SHA256

    6c3514b44771b6dca018d2e5cc749d74973b8397e9e8b75682e06844b888e29c

  • SHA512

    2dcaeb82450d1cbe798c83c11188353d291dd25a87f84edca17fcb68c0932f70c3335aec1566c57d1a29606e4644554f292791d736cd4c069e9b28e7707e68a7

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      1c2d54e55be2351a01b06ee68812334534b01347

    • Size

      308KB

    • MD5

      7c2a9355e41785c4a6e7ca7b891545d4

    • SHA1

      1c2d54e55be2351a01b06ee68812334534b01347

    • SHA256

      6c3514b44771b6dca018d2e5cc749d74973b8397e9e8b75682e06844b888e29c

    • SHA512

      2dcaeb82450d1cbe798c83c11188353d291dd25a87f84edca17fcb68c0932f70c3335aec1566c57d1a29606e4644554f292791d736cd4c069e9b28e7707e68a7

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks