General

  • Target

    43a3248d78d6bd8fa98d5eeb9a4e1c91

  • Size

    312KB

  • Sample

    241110-3mdsfsxejq

  • MD5

    43a3248d78d6bd8fa98d5eeb9a4e1c91

  • SHA1

    b020174f75cb2ebb3be0ab27a69d48e83459bc5d

  • SHA256

    c0704634a31198f147b79f652a53de70aa6d7cc0d47a4d6dad891346453d68f8

  • SHA512

    bc843adb5bf3011e1973f5113e9c2fc941e2c0b5b54c76a137e18404f2bf05e5dc55a1c24cf55f564358dc2c569c5f6a5ae5fa51647932ba482bd5349ec9116a

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      43a3248d78d6bd8fa98d5eeb9a4e1c91

    • Size

      312KB

    • MD5

      43a3248d78d6bd8fa98d5eeb9a4e1c91

    • SHA1

      b020174f75cb2ebb3be0ab27a69d48e83459bc5d

    • SHA256

      c0704634a31198f147b79f652a53de70aa6d7cc0d47a4d6dad891346453d68f8

    • SHA512

      bc843adb5bf3011e1973f5113e9c2fc941e2c0b5b54c76a137e18404f2bf05e5dc55a1c24cf55f564358dc2c569c5f6a5ae5fa51647932ba482bd5349ec9116a

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks