General

  • Target

    1f7f986eb9bb3c94e7bb79e0f1e048c3ee246ffd

  • Size

    306KB

  • Sample

    241111-aszynaxpfs

  • MD5

    ddb662f2aef1a26c9dabe2480c117e38

  • SHA1

    1f7f986eb9bb3c94e7bb79e0f1e048c3ee246ffd

  • SHA256

    925789671b746056b4f98b02d5734e6d4c869a497f56a4eea0ffe786b5778dc6

  • SHA512

    33c1e830642b8a0d936dbd4a91568844722f633b27ea4e301f92acd30a9ab79692887b68fad141e4cc4d9f9038d208d345b4ab09525dc42877fff57ca1f18785

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      1f7f986eb9bb3c94e7bb79e0f1e048c3ee246ffd

    • Size

      306KB

    • MD5

      ddb662f2aef1a26c9dabe2480c117e38

    • SHA1

      1f7f986eb9bb3c94e7bb79e0f1e048c3ee246ffd

    • SHA256

      925789671b746056b4f98b02d5734e6d4c869a497f56a4eea0ffe786b5778dc6

    • SHA512

      33c1e830642b8a0d936dbd4a91568844722f633b27ea4e301f92acd30a9ab79692887b68fad141e4cc4d9f9038d208d345b4ab09525dc42877fff57ca1f18785

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks