General

  • Target

    c2a5b2416f1a2de20b546a7a7ef9e093

  • Size

    321KB

  • Sample

    241110-3pgl5a1jdk

  • MD5

    c2a5b2416f1a2de20b546a7a7ef9e093

  • SHA1

    5cc3c109051549a0cdfc2440c6dc4b4de78715e0

  • SHA256

    1af87d806211f58287b9deac6abeda3aa536d4acab0216d5d80dd1364104f9aa

  • SHA512

    6c77a0545d8f4cb77126311e990b6cdad2456f1e21dd41da4e7d47625fae9d4375c0134b0bef56017cf7ecbd457a59d24955cc4191605dda568c9c32adcdfccc

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      c2a5b2416f1a2de20b546a7a7ef9e093

    • Size

      321KB

    • MD5

      c2a5b2416f1a2de20b546a7a7ef9e093

    • SHA1

      5cc3c109051549a0cdfc2440c6dc4b4de78715e0

    • SHA256

      1af87d806211f58287b9deac6abeda3aa536d4acab0216d5d80dd1364104f9aa

    • SHA512

      6c77a0545d8f4cb77126311e990b6cdad2456f1e21dd41da4e7d47625fae9d4375c0134b0bef56017cf7ecbd457a59d24955cc4191605dda568c9c32adcdfccc

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks