General

  • Target

    aa3c04941a2e3a57b72beb98e80a67e63ee6258b

  • Size

    314KB

  • Sample

    241110-3cmydaxcrl

  • MD5

    39fad851b02ec98eed55429abaf6b67c

  • SHA1

    aa3c04941a2e3a57b72beb98e80a67e63ee6258b

  • SHA256

    605a4df9d8bc5d9ca8cd67cbfed178347a225350d33db9f2cf58c4c1249d9f45

  • SHA512

    3c8f121bfefbdf8df3b0a55661bafefca764ab6ce17e6bfe8a9507128a09aecb8fff7116a9e25fc792f489680225270a949a348fd25ccd61eeb13efbc45ad547

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      aa3c04941a2e3a57b72beb98e80a67e63ee6258b

    • Size

      314KB

    • MD5

      39fad851b02ec98eed55429abaf6b67c

    • SHA1

      aa3c04941a2e3a57b72beb98e80a67e63ee6258b

    • SHA256

      605a4df9d8bc5d9ca8cd67cbfed178347a225350d33db9f2cf58c4c1249d9f45

    • SHA512

      3c8f121bfefbdf8df3b0a55661bafefca764ab6ce17e6bfe8a9507128a09aecb8fff7116a9e25fc792f489680225270a949a348fd25ccd61eeb13efbc45ad547

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks