General

  • Target

    d8dd8747adb7dd2e21383d460967222c04ebf441

  • Size

    310KB

  • Sample

    241110-3pt78axgrg

  • MD5

    fb36a971fb209c9dd038f17479376a9c

  • SHA1

    d8dd8747adb7dd2e21383d460967222c04ebf441

  • SHA256

    ee23b70f111c1aee92daa831609dd9a7b6c4747f563c867210574d94bd4d97da

  • SHA512

    0877328d7742b3a39662669583dd722519de4a317611330f77cbe4f071d5b83110ee86368d5ac67e6a8f28c30ee6cd7bfe89ceb224e36a9feeddf3b7d63acb7b

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      d8dd8747adb7dd2e21383d460967222c04ebf441

    • Size

      310KB

    • MD5

      fb36a971fb209c9dd038f17479376a9c

    • SHA1

      d8dd8747adb7dd2e21383d460967222c04ebf441

    • SHA256

      ee23b70f111c1aee92daa831609dd9a7b6c4747f563c867210574d94bd4d97da

    • SHA512

      0877328d7742b3a39662669583dd722519de4a317611330f77cbe4f071d5b83110ee86368d5ac67e6a8f28c30ee6cd7bfe89ceb224e36a9feeddf3b7d63acb7b

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks