General

  • Target

    d69e26d6d0334dd5a43edd1683c9fe392fbf9b7f

  • Size

    307KB

  • Sample

    241111-ag1e2sycne

  • MD5

    5d7cb941a67a5f6d71a33b73ce1460a1

  • SHA1

    d69e26d6d0334dd5a43edd1683c9fe392fbf9b7f

  • SHA256

    65c19a74c3ab9a715a3013991720584729ddcfb8b09ce57408211a3cd1488775

  • SHA512

    e1908640aef79e40e1cc792dec92c464561a9da3a4e0c9f174c84a25ee18bfa69c4172fce757d98023b6ea26169cbee6bcc1f73a566aa0db1e5f4b5835dd0e25

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      d69e26d6d0334dd5a43edd1683c9fe392fbf9b7f

    • Size

      307KB

    • MD5

      5d7cb941a67a5f6d71a33b73ce1460a1

    • SHA1

      d69e26d6d0334dd5a43edd1683c9fe392fbf9b7f

    • SHA256

      65c19a74c3ab9a715a3013991720584729ddcfb8b09ce57408211a3cd1488775

    • SHA512

      e1908640aef79e40e1cc792dec92c464561a9da3a4e0c9f174c84a25ee18bfa69c4172fce757d98023b6ea26169cbee6bcc1f73a566aa0db1e5f4b5835dd0e25

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks