General

  • Target

    8ced5a99e552544de6ffd4919ff71e89

  • Size

    308KB

  • Sample

    241110-3r6n2axkbx

  • MD5

    8ced5a99e552544de6ffd4919ff71e89

  • SHA1

    dd8bfa119cb4abef667162cfbbb8253dd0873448

  • SHA256

    ec4bf3fce9f910716be1a7a62b2c1f313c53dadcffba4bf1163973fe9ba4f278

  • SHA512

    c39b2dc31289de7a4805ecddb3a62ec088bcfbfc0e8b38082c1161f30cbdb5e23a162345cf69c58a15245ff61531f3062e76523aaa10c1a574eb1d423e677e0d

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      8ced5a99e552544de6ffd4919ff71e89

    • Size

      308KB

    • MD5

      8ced5a99e552544de6ffd4919ff71e89

    • SHA1

      dd8bfa119cb4abef667162cfbbb8253dd0873448

    • SHA256

      ec4bf3fce9f910716be1a7a62b2c1f313c53dadcffba4bf1163973fe9ba4f278

    • SHA512

      c39b2dc31289de7a4805ecddb3a62ec088bcfbfc0e8b38082c1161f30cbdb5e23a162345cf69c58a15245ff61531f3062e76523aaa10c1a574eb1d423e677e0d

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks