General

  • Target

    c459a0a20f1706778abfbed55fbe1a4ad823000c

  • Size

    306KB

  • Sample

    241111-bdx17aslbj

  • MD5

    9d34764fa15725e156cf8499e49aed36

  • SHA1

    c459a0a20f1706778abfbed55fbe1a4ad823000c

  • SHA256

    c1ec41a656f4ca09acf0342201bfdb6c28ead0a506b5eaff79e6cdc75333f7cb

  • SHA512

    504cbf6a0d2c4d86146f5c9095d2c67f208319e3bb3887efa0e1002dcdf325f2ff9809c9662a584046b66a6948fe285d045942466050e647228a66d33389c891

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      c459a0a20f1706778abfbed55fbe1a4ad823000c

    • Size

      306KB

    • MD5

      9d34764fa15725e156cf8499e49aed36

    • SHA1

      c459a0a20f1706778abfbed55fbe1a4ad823000c

    • SHA256

      c1ec41a656f4ca09acf0342201bfdb6c28ead0a506b5eaff79e6cdc75333f7cb

    • SHA512

      504cbf6a0d2c4d86146f5c9095d2c67f208319e3bb3887efa0e1002dcdf325f2ff9809c9662a584046b66a6948fe285d045942466050e647228a66d33389c891

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks