General

  • Target

    be548899c83d3c5e3095c77ba0d7f28cd3a42c40431ae511cee63e4c3d1309e1

  • Size

    314KB

  • Sample

    241111-a2hqqsydjp

  • MD5

    13747d4a9d7c1452ee02cd18f64296fe

  • SHA1

    79b1ea4248789e70bd6d5f75b2599e1c0a6b7fe4

  • SHA256

    be548899c83d3c5e3095c77ba0d7f28cd3a42c40431ae511cee63e4c3d1309e1

  • SHA512

    df20d8f1b67100e4e06af81310e1090bf0c71f4d5f20786120f0ddca09d8e8f2f07e499ed348bf70935a252b7ba3e3c51d8fd03fbfacfb6632a6703eecc61424

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      be548899c83d3c5e3095c77ba0d7f28cd3a42c40431ae511cee63e4c3d1309e1

    • Size

      314KB

    • MD5

      13747d4a9d7c1452ee02cd18f64296fe

    • SHA1

      79b1ea4248789e70bd6d5f75b2599e1c0a6b7fe4

    • SHA256

      be548899c83d3c5e3095c77ba0d7f28cd3a42c40431ae511cee63e4c3d1309e1

    • SHA512

      df20d8f1b67100e4e06af81310e1090bf0c71f4d5f20786120f0ddca09d8e8f2f07e499ed348bf70935a252b7ba3e3c51d8fd03fbfacfb6632a6703eecc61424

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks