General

  • Target

    7df00d5a78536422c5741e357752271d982f00e3cb723fe3b318306cc4faff16

  • Size

    307KB

  • Sample

    241111-b6jdhazcjq

  • MD5

    3a9cd544c921f94acc1e970204cd9bc9

  • SHA1

    c295ab4b869b3c5addda84273a845b030f8ff929

  • SHA256

    7df00d5a78536422c5741e357752271d982f00e3cb723fe3b318306cc4faff16

  • SHA512

    9bc949e7417dbebce6f2d2a622c1c01524672001bd3147f9fbb4487e7dab2ea910d886c4f825d04910b6d6d761cb5a3db556b3263881cfacd77149715a329dbf

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      7df00d5a78536422c5741e357752271d982f00e3cb723fe3b318306cc4faff16

    • Size

      307KB

    • MD5

      3a9cd544c921f94acc1e970204cd9bc9

    • SHA1

      c295ab4b869b3c5addda84273a845b030f8ff929

    • SHA256

      7df00d5a78536422c5741e357752271d982f00e3cb723fe3b318306cc4faff16

    • SHA512

      9bc949e7417dbebce6f2d2a622c1c01524672001bd3147f9fbb4487e7dab2ea910d886c4f825d04910b6d6d761cb5a3db556b3263881cfacd77149715a329dbf

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks