General

  • Target

    cbd4a613175e25acfa7edd3f75f58f1e

  • Size

    318KB

  • Sample

    241110-3m6s8sxjcs

  • MD5

    cbd4a613175e25acfa7edd3f75f58f1e

  • SHA1

    00d05bfa93e6662dbf653440b4b01d06beba699e

  • SHA256

    9d4fb6ef57f668a4c866f9ead10fffe4f85212348e38dd09f5f732c66afde13b

  • SHA512

    3f8d2a28294312b7c5689a7783260a2e443f55f3d12b4f0fd7e4faae6de44881a8f5ea2e41be24a8e8ac685c9b8bc69dbdbbad3db3bcac0cc382f85a69280d42

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      cbd4a613175e25acfa7edd3f75f58f1e

    • Size

      318KB

    • MD5

      cbd4a613175e25acfa7edd3f75f58f1e

    • SHA1

      00d05bfa93e6662dbf653440b4b01d06beba699e

    • SHA256

      9d4fb6ef57f668a4c866f9ead10fffe4f85212348e38dd09f5f732c66afde13b

    • SHA512

      3f8d2a28294312b7c5689a7783260a2e443f55f3d12b4f0fd7e4faae6de44881a8f5ea2e41be24a8e8ac685c9b8bc69dbdbbad3db3bcac0cc382f85a69280d42

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks