General

  • Target

    0d438b6a04e5de5d99ad7e69c3487213d5e3d9844283d831138baa2211c2cf08

  • Size

    315KB

  • Sample

    241110-3cpf7sxcrm

  • MD5

    f7a612dcccbb08d504445a85d6407711

  • SHA1

    d62f1f5e21f5b1ce5f27e6c2865a4ba25f7ccc0a

  • SHA256

    0d438b6a04e5de5d99ad7e69c3487213d5e3d9844283d831138baa2211c2cf08

  • SHA512

    056fd7d5bf50191a335bd288fb9866a31cd6a0bc8c92ecf9f5b138530de9d630d0f2a4a0baaed0a046a5c0aa123e3d0f2a84ccc36ae7298e107375c9e9c71d5c

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      0d438b6a04e5de5d99ad7e69c3487213d5e3d9844283d831138baa2211c2cf08

    • Size

      315KB

    • MD5

      f7a612dcccbb08d504445a85d6407711

    • SHA1

      d62f1f5e21f5b1ce5f27e6c2865a4ba25f7ccc0a

    • SHA256

      0d438b6a04e5de5d99ad7e69c3487213d5e3d9844283d831138baa2211c2cf08

    • SHA512

      056fd7d5bf50191a335bd288fb9866a31cd6a0bc8c92ecf9f5b138530de9d630d0f2a4a0baaed0a046a5c0aa123e3d0f2a84ccc36ae7298e107375c9e9c71d5c

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks