General

  • Target

    52bd9ab26ab28d52f0a2326cbcd0a246

  • Size

    314KB

  • Sample

    241111-aybs1sxqdy

  • MD5

    52bd9ab26ab28d52f0a2326cbcd0a246

  • SHA1

    4472bfb3e555e21b33720d596c8ded27449a6ae0

  • SHA256

    10aab09e95a5aa224fa49075caa4cdf55d650017a9cb0cf5b54477586dbc2888

  • SHA512

    22ef150205c1b1f93395d9a137279d8b41f56a180cbf2cc990a2d4f680f03d6364bee3fa2b79dc5975dfbd2b4d310af6ae4fc6ae42e0a119ac7a41df81c67f7c

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      52bd9ab26ab28d52f0a2326cbcd0a246

    • Size

      314KB

    • MD5

      52bd9ab26ab28d52f0a2326cbcd0a246

    • SHA1

      4472bfb3e555e21b33720d596c8ded27449a6ae0

    • SHA256

      10aab09e95a5aa224fa49075caa4cdf55d650017a9cb0cf5b54477586dbc2888

    • SHA512

      22ef150205c1b1f93395d9a137279d8b41f56a180cbf2cc990a2d4f680f03d6364bee3fa2b79dc5975dfbd2b4d310af6ae4fc6ae42e0a119ac7a41df81c67f7c

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks