General

  • Target

    e1c564af65dcc32633527dc3d9effef8abd55c0bb74faca386a008c5edf1d319

  • Size

    311KB

  • Sample

    241111-b8vjjssrfr

  • MD5

    bc74e209480c05f9db5664ef755f2ab1

  • SHA1

    ee654f2211e689bf5e50d9f1c4b2813f9312a43b

  • SHA256

    e1c564af65dcc32633527dc3d9effef8abd55c0bb74faca386a008c5edf1d319

  • SHA512

    d4cb281908dc5c6e5b3e1bda486d3d3eceec297d82327ee0e61e361443ffd27b25d5bff70a774a035846a5455e8c713cfcdc509dde25631a78f4dd00305bc86f

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      e1c564af65dcc32633527dc3d9effef8abd55c0bb74faca386a008c5edf1d319

    • Size

      311KB

    • MD5

      bc74e209480c05f9db5664ef755f2ab1

    • SHA1

      ee654f2211e689bf5e50d9f1c4b2813f9312a43b

    • SHA256

      e1c564af65dcc32633527dc3d9effef8abd55c0bb74faca386a008c5edf1d319

    • SHA512

      d4cb281908dc5c6e5b3e1bda486d3d3eceec297d82327ee0e61e361443ffd27b25d5bff70a774a035846a5455e8c713cfcdc509dde25631a78f4dd00305bc86f

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks