General

  • Target

    28319380b010bb48b2e4c9722819d959

  • Size

    312KB

  • Sample

    241111-c5cp1atqfk

  • MD5

    28319380b010bb48b2e4c9722819d959

  • SHA1

    16a648f4d48e4c3b5c669db31c46002025b574ad

  • SHA256

    7d7014f5dd72f8ccab387d3e708ac832ba12bb812bf9c5946508f3d4c137d843

  • SHA512

    c46c9fd96fe0886aa4d1ef6cadbdd9c849ed135ddb9bbbd15de1da420289911505ffb57cc4fd4ae5dd73664be0765d7750d0f776ce0f3ee5cbee5eea07ec84f2

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      28319380b010bb48b2e4c9722819d959

    • Size

      312KB

    • MD5

      28319380b010bb48b2e4c9722819d959

    • SHA1

      16a648f4d48e4c3b5c669db31c46002025b574ad

    • SHA256

      7d7014f5dd72f8ccab387d3e708ac832ba12bb812bf9c5946508f3d4c137d843

    • SHA512

      c46c9fd96fe0886aa4d1ef6cadbdd9c849ed135ddb9bbbd15de1da420289911505ffb57cc4fd4ae5dd73664be0765d7750d0f776ce0f3ee5cbee5eea07ec84f2

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks