General

  • Target

    32350992a3a2ec4d0e5ec7387d1861c79b57b87404980518aa7bb6a9e152b312

  • Size

    318KB

  • Sample

    241111-bagvssskdm

  • MD5

    8de3dfdbb2a9afbcfafb6ae5fc54653b

  • SHA1

    454d059e5139a4074017024b5d88c3b43d4fe27b

  • SHA256

    32350992a3a2ec4d0e5ec7387d1861c79b57b87404980518aa7bb6a9e152b312

  • SHA512

    5b6bccb4b69ff1e80f523c53e8996b992372775c189418eae3ad59674d0cfea06770d04db7872cb1100796693b2b64005653e68f60db77bce9d7970ce661e82c

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      32350992a3a2ec4d0e5ec7387d1861c79b57b87404980518aa7bb6a9e152b312

    • Size

      318KB

    • MD5

      8de3dfdbb2a9afbcfafb6ae5fc54653b

    • SHA1

      454d059e5139a4074017024b5d88c3b43d4fe27b

    • SHA256

      32350992a3a2ec4d0e5ec7387d1861c79b57b87404980518aa7bb6a9e152b312

    • SHA512

      5b6bccb4b69ff1e80f523c53e8996b992372775c189418eae3ad59674d0cfea06770d04db7872cb1100796693b2b64005653e68f60db77bce9d7970ce661e82c

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks