General

  • Target

    ee2c85a5f84a88940761b498cfd45678c40620b8

  • Size

    310KB

  • Sample

    241111-c4d7fa1bkq

  • MD5

    7f1e84f6398dc3b8d8b2ced1232040f6

  • SHA1

    ee2c85a5f84a88940761b498cfd45678c40620b8

  • SHA256

    840b497061f77fcd5f8346dc615eb653ffef065710c48144edac87591aebaa4f

  • SHA512

    49bba2148b7f3bd4008ab5d550a9e6c0930e6eb4ba5905477799fb027a01febb76f4a84116ab27fc088a9ef91ef67d11a53d7bf847ecf8cfb744fe3b6cc58cf2

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      ee2c85a5f84a88940761b498cfd45678c40620b8

    • Size

      310KB

    • MD5

      7f1e84f6398dc3b8d8b2ced1232040f6

    • SHA1

      ee2c85a5f84a88940761b498cfd45678c40620b8

    • SHA256

      840b497061f77fcd5f8346dc615eb653ffef065710c48144edac87591aebaa4f

    • SHA512

      49bba2148b7f3bd4008ab5d550a9e6c0930e6eb4ba5905477799fb027a01febb76f4a84116ab27fc088a9ef91ef67d11a53d7bf847ecf8cfb744fe3b6cc58cf2

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks