General

  • Target

    728462893d1ce91a485a29e70a7195194184ab69c5b6490d4c773f3e2b23777b

  • Size

    318KB

  • Sample

    241111-ar6pta1qan

  • MD5

    53710781d7edac39dc3b5e075361c768

  • SHA1

    73b14b890acf41bca044a4d3c1c071d8197cf7c1

  • SHA256

    728462893d1ce91a485a29e70a7195194184ab69c5b6490d4c773f3e2b23777b

  • SHA512

    7368557a6a42161480e9b17ba409f2498af80e7e0e46048ede4851eca1ebd7d6ee001c4a7083fa104d03be0308f12e26495004888f368e09ce2ead6f93be6646

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      728462893d1ce91a485a29e70a7195194184ab69c5b6490d4c773f3e2b23777b

    • Size

      318KB

    • MD5

      53710781d7edac39dc3b5e075361c768

    • SHA1

      73b14b890acf41bca044a4d3c1c071d8197cf7c1

    • SHA256

      728462893d1ce91a485a29e70a7195194184ab69c5b6490d4c773f3e2b23777b

    • SHA512

      7368557a6a42161480e9b17ba409f2498af80e7e0e46048ede4851eca1ebd7d6ee001c4a7083fa104d03be0308f12e26495004888f368e09ce2ead6f93be6646

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks