General

  • Target

    9c970d1030d29473f7c8584c8a2a8285

  • Size

    311KB

  • Sample

    241111-az22layfrc

  • MD5

    9c970d1030d29473f7c8584c8a2a8285

  • SHA1

    293558fc310f12578743340849bac83364e60756

  • SHA256

    37f8d6e7e1c57272e22065ec2fb457df61e9e61b2eb5e60d376a1a62b47f883c

  • SHA512

    c0b2f4159c3e54c248d9acb6b0ab7b676fd56b30102f1fe846909ad6efeb72a3e2cffe2f72deb4dd6d8dbfe575e8ad3a57a05554c5a57a70c866b986ad0c5391

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      9c970d1030d29473f7c8584c8a2a8285

    • Size

      311KB

    • MD5

      9c970d1030d29473f7c8584c8a2a8285

    • SHA1

      293558fc310f12578743340849bac83364e60756

    • SHA256

      37f8d6e7e1c57272e22065ec2fb457df61e9e61b2eb5e60d376a1a62b47f883c

    • SHA512

      c0b2f4159c3e54c248d9acb6b0ab7b676fd56b30102f1fe846909ad6efeb72a3e2cffe2f72deb4dd6d8dbfe575e8ad3a57a05554c5a57a70c866b986ad0c5391

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks