General

  • Target

    69b562177d0a602170a54644b2b47ed4

  • Size

    307KB

  • Sample

    241110-3xqj1axfrm

  • MD5

    69b562177d0a602170a54644b2b47ed4

  • SHA1

    29514771052ffeb45c74f55b92139e78937aa788

  • SHA256

    4d13781cd75544c73873478c8121882d0a504508756792a5e3b60b295523339f

  • SHA512

    ff78ae9b07cc5d1b450b0bf7a81e61c4fc1fe1c745371ddc92c2fe4b8ba8917c0bd31f801c750e4cdd45e2cd8de01c1a2b898f98bdf6c934b67521fa5859965d

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      69b562177d0a602170a54644b2b47ed4

    • Size

      307KB

    • MD5

      69b562177d0a602170a54644b2b47ed4

    • SHA1

      29514771052ffeb45c74f55b92139e78937aa788

    • SHA256

      4d13781cd75544c73873478c8121882d0a504508756792a5e3b60b295523339f

    • SHA512

      ff78ae9b07cc5d1b450b0bf7a81e61c4fc1fe1c745371ddc92c2fe4b8ba8917c0bd31f801c750e4cdd45e2cd8de01c1a2b898f98bdf6c934b67521fa5859965d

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks