General

  • Target

    64e1150e98092729b8c23304846077507bcc6150

  • Size

    305KB

  • Sample

    241111-ajhysaxna1

  • MD5

    ed87d141a4a05d90698cad8af90f0059

  • SHA1

    64e1150e98092729b8c23304846077507bcc6150

  • SHA256

    00662260fcd993558eccda9df10f6669af36c44997014b63178b2780fcb28a29

  • SHA512

    b38a9fa683022ff6249c6f4eb60114e83cfe1781a37fc98bedede28ab7d3dc8b4614ef316816c06e95a72f171d9aa1f14108733763e7190391627a86f508b881

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      64e1150e98092729b8c23304846077507bcc6150

    • Size

      305KB

    • MD5

      ed87d141a4a05d90698cad8af90f0059

    • SHA1

      64e1150e98092729b8c23304846077507bcc6150

    • SHA256

      00662260fcd993558eccda9df10f6669af36c44997014b63178b2780fcb28a29

    • SHA512

      b38a9fa683022ff6249c6f4eb60114e83cfe1781a37fc98bedede28ab7d3dc8b4614ef316816c06e95a72f171d9aa1f14108733763e7190391627a86f508b881

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks