General

  • Target

    1f3953f1bf2900716c409ef2e27ac69f15825e54

  • Size

    315KB

  • Sample

    241110-z6jahaylgk

  • MD5

    a6456db931ae126a2941f91e3b2ecc38

  • SHA1

    1f3953f1bf2900716c409ef2e27ac69f15825e54

  • SHA256

    f636a1c03d0658d787285324e4dfaec7f5cf00b628af358d9ba4cede4178c22a

  • SHA512

    fc151bcb007e0d91175d6e1ec922c6156530d77ca1d408a97efdb2acdbaea887f14c777e94a1aa94451a8a593d0f08274ded68d0d9f233dd2825ef0e2c73ea97

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      1f3953f1bf2900716c409ef2e27ac69f15825e54

    • Size

      315KB

    • MD5

      a6456db931ae126a2941f91e3b2ecc38

    • SHA1

      1f3953f1bf2900716c409ef2e27ac69f15825e54

    • SHA256

      f636a1c03d0658d787285324e4dfaec7f5cf00b628af358d9ba4cede4178c22a

    • SHA512

      fc151bcb007e0d91175d6e1ec922c6156530d77ca1d408a97efdb2acdbaea887f14c777e94a1aa94451a8a593d0f08274ded68d0d9f233dd2825ef0e2c73ea97

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks