General

  • Target

    3026132c743bbf9a9531cc6d6b6c9c445fcc5bf04eabd3395ed5b9acc77bdcaa

  • Size

    311KB

  • Sample

    241110-b2zjxswgnq

  • MD5

    8435846a4bd09fd05f508047280d50ab

  • SHA1

    91153057b108ba4f93c03549a1038a4fd2fe65e1

  • SHA256

    3026132c743bbf9a9531cc6d6b6c9c445fcc5bf04eabd3395ed5b9acc77bdcaa

  • SHA512

    2ad928b98214e819c8d04ac114c56026d3a5a4de89e11e3e99e372006aa5b66e9c04cccf427a72e9938dd1b0b014e8701039d17ca5231c9a691bdac5af3ca955

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      3026132c743bbf9a9531cc6d6b6c9c445fcc5bf04eabd3395ed5b9acc77bdcaa

    • Size

      311KB

    • MD5

      8435846a4bd09fd05f508047280d50ab

    • SHA1

      91153057b108ba4f93c03549a1038a4fd2fe65e1

    • SHA256

      3026132c743bbf9a9531cc6d6b6c9c445fcc5bf04eabd3395ed5b9acc77bdcaa

    • SHA512

      2ad928b98214e819c8d04ac114c56026d3a5a4de89e11e3e99e372006aa5b66e9c04cccf427a72e9938dd1b0b014e8701039d17ca5231c9a691bdac5af3ca955

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks