General

  • Target

    e68a906f1ee18bd2adc64e85db2ae4ed818745422a4af4356c80b4d673c12ff2

  • Size

    312KB

  • Sample

    241111-c3zrratqcn

  • MD5

    f4cf4485cd1047d1dc688a861f75fe8d

  • SHA1

    a240840017e74a82021bd0831d00ecaa417780c0

  • SHA256

    e68a906f1ee18bd2adc64e85db2ae4ed818745422a4af4356c80b4d673c12ff2

  • SHA512

    3c17aaf035154b824482a02e9ed9c4b4fa8202058ac3deb6710046cd5e9ef66171372c4cea148c0b1ae06db25a578a24faa79ebf315d3550ef083c0956b9983d

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      e68a906f1ee18bd2adc64e85db2ae4ed818745422a4af4356c80b4d673c12ff2

    • Size

      312KB

    • MD5

      f4cf4485cd1047d1dc688a861f75fe8d

    • SHA1

      a240840017e74a82021bd0831d00ecaa417780c0

    • SHA256

      e68a906f1ee18bd2adc64e85db2ae4ed818745422a4af4356c80b4d673c12ff2

    • SHA512

      3c17aaf035154b824482a02e9ed9c4b4fa8202058ac3deb6710046cd5e9ef66171372c4cea148c0b1ae06db25a578a24faa79ebf315d3550ef083c0956b9983d

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks