General

  • Target

    23faeb8f0abe70b6f0ee481f8b4a0dd657374eee4c85b1fb2116a273caaa6b33

  • Size

    315KB

  • Sample

    241110-3r77vs1kan

  • MD5

    0af463e848279aa8f22ef7085eb006aa

  • SHA1

    26834623ffdce1c5cae159e2a9b31a8c1430b155

  • SHA256

    23faeb8f0abe70b6f0ee481f8b4a0dd657374eee4c85b1fb2116a273caaa6b33

  • SHA512

    afa3553e8f308891e53c1b74fc745f4ed513bc03ef15c09b364daac2d77a428a32836ed6e891f3dca9e53e655ccaa5124b20cb96f72bea543be28f9f98522798

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      23faeb8f0abe70b6f0ee481f8b4a0dd657374eee4c85b1fb2116a273caaa6b33

    • Size

      315KB

    • MD5

      0af463e848279aa8f22ef7085eb006aa

    • SHA1

      26834623ffdce1c5cae159e2a9b31a8c1430b155

    • SHA256

      23faeb8f0abe70b6f0ee481f8b4a0dd657374eee4c85b1fb2116a273caaa6b33

    • SHA512

      afa3553e8f308891e53c1b74fc745f4ed513bc03ef15c09b364daac2d77a428a32836ed6e891f3dca9e53e655ccaa5124b20cb96f72bea543be28f9f98522798

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks