General

  • Target

    584d81c2cc81f8f76aa2efac446234ff58157996

  • Size

    309KB

  • Sample

    241111-bgwbrsyfrm

  • MD5

    a7b82f83bbc4680ddbdf59dfd2abecff

  • SHA1

    584d81c2cc81f8f76aa2efac446234ff58157996

  • SHA256

    0e3892d0cac98195c8024e9d67b290be9792fd5a77f6b06602e0310cc87feaaa

  • SHA512

    6d5660539ada7dcb332dcdf86716a832b1f5c51cea8477fed2a39d4db12fbf7bf42a086013bf940fb86addda42fddadc1eba5581bf5520dee4a0aa603f142df8

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      584d81c2cc81f8f76aa2efac446234ff58157996

    • Size

      309KB

    • MD5

      a7b82f83bbc4680ddbdf59dfd2abecff

    • SHA1

      584d81c2cc81f8f76aa2efac446234ff58157996

    • SHA256

      0e3892d0cac98195c8024e9d67b290be9792fd5a77f6b06602e0310cc87feaaa

    • SHA512

      6d5660539ada7dcb332dcdf86716a832b1f5c51cea8477fed2a39d4db12fbf7bf42a086013bf940fb86addda42fddadc1eba5581bf5520dee4a0aa603f142df8

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks