General

  • Target

    7a935148b52e57da16c517ab4f24a7c327c59fd45755602565e03fed8f1d8dd7

  • Size

    314KB

  • Sample

    241111-bn79xaygrk

  • MD5

    7f1ac395224f508e1726a565df320f3a

  • SHA1

    89526f821aafa482dd954061dd8ecbefafc8a82a

  • SHA256

    7a935148b52e57da16c517ab4f24a7c327c59fd45755602565e03fed8f1d8dd7

  • SHA512

    a63b8d4b8c923ee85ccc7ccfd0ae46604cb3e2bad489a218658be4454fa80c92b84e2803dec8cfcd8e303e8fd8d76946e2c62f4306909deb34e4761c6bf4e70f

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      7a935148b52e57da16c517ab4f24a7c327c59fd45755602565e03fed8f1d8dd7

    • Size

      314KB

    • MD5

      7f1ac395224f508e1726a565df320f3a

    • SHA1

      89526f821aafa482dd954061dd8ecbefafc8a82a

    • SHA256

      7a935148b52e57da16c517ab4f24a7c327c59fd45755602565e03fed8f1d8dd7

    • SHA512

      a63b8d4b8c923ee85ccc7ccfd0ae46604cb3e2bad489a218658be4454fa80c92b84e2803dec8cfcd8e303e8fd8d76946e2c62f4306909deb34e4761c6bf4e70f

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks