General

  • Target

    6a8b94c28c8d6dc50386122e1e793e86

  • Size

    317KB

  • Sample

    241110-3zyy6axglj

  • MD5

    6a8b94c28c8d6dc50386122e1e793e86

  • SHA1

    5336d359c7a3e2cd4e2b847a16f6f4554e706594

  • SHA256

    b14e3d91564055836f1de723c5cfcd6a03b4fd242ce556fdaf19ed86f55cf21a

  • SHA512

    3e67a11883218f5db9c28df7fb439ebf5ba2086e7765d74f9e60c2a6c94be9b5a7650914da1b71192f5ed00bd682bf29c21f2e8ea4d6fe2185d3517b47ac7371

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      6a8b94c28c8d6dc50386122e1e793e86

    • Size

      317KB

    • MD5

      6a8b94c28c8d6dc50386122e1e793e86

    • SHA1

      5336d359c7a3e2cd4e2b847a16f6f4554e706594

    • SHA256

      b14e3d91564055836f1de723c5cfcd6a03b4fd242ce556fdaf19ed86f55cf21a

    • SHA512

      3e67a11883218f5db9c28df7fb439ebf5ba2086e7765d74f9e60c2a6c94be9b5a7650914da1b71192f5ed00bd682bf29c21f2e8ea4d6fe2185d3517b47ac7371

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks