General

  • Target

    2f467f779d22e439768876b02096982cb6e1bb83

  • Size

    313KB

  • Sample

    241110-3q7jyaxhld

  • MD5

    06c77a3ba4406ee35489487da942a47a

  • SHA1

    2f467f779d22e439768876b02096982cb6e1bb83

  • SHA256

    4572c5ee0c27935d64fb33b5042bd975a634b65b4ab5c5ba5bcfcdfc27044a91

  • SHA512

    4c5e104c25cf31bd7ef53a4f857c0c29ba10d9389c332885889ba8d9bca818fa7799b9b499f8f40e171d4326e1c3e05d03770aa50c34c42ef0897714bb87eb78

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      2f467f779d22e439768876b02096982cb6e1bb83

    • Size

      313KB

    • MD5

      06c77a3ba4406ee35489487da942a47a

    • SHA1

      2f467f779d22e439768876b02096982cb6e1bb83

    • SHA256

      4572c5ee0c27935d64fb33b5042bd975a634b65b4ab5c5ba5bcfcdfc27044a91

    • SHA512

      4c5e104c25cf31bd7ef53a4f857c0c29ba10d9389c332885889ba8d9bca818fa7799b9b499f8f40e171d4326e1c3e05d03770aa50c34c42ef0897714bb87eb78

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks