General

  • Target

    eab8a41e8fc10e9af1a40cf4914374ef7ada6d54c006a9d571ab0a55add83bac

  • Size

    311KB

  • Sample

    241111-c6qcgs1bqj

  • MD5

    1a0731c2c5202772fa6d4949ef1fe8a7

  • SHA1

    e08754dba1c1aa7045165451edcfc423ff838ed6

  • SHA256

    eab8a41e8fc10e9af1a40cf4914374ef7ada6d54c006a9d571ab0a55add83bac

  • SHA512

    dcf7b6ddd7131f42c79ecf4c283918c655b77b481d03fb708bf14c74facf58951010e41373f4dda67b0077709424c047ccc4c019196ce6291fa0d143d31b93c2

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      eab8a41e8fc10e9af1a40cf4914374ef7ada6d54c006a9d571ab0a55add83bac

    • Size

      311KB

    • MD5

      1a0731c2c5202772fa6d4949ef1fe8a7

    • SHA1

      e08754dba1c1aa7045165451edcfc423ff838ed6

    • SHA256

      eab8a41e8fc10e9af1a40cf4914374ef7ada6d54c006a9d571ab0a55add83bac

    • SHA512

      dcf7b6ddd7131f42c79ecf4c283918c655b77b481d03fb708bf14c74facf58951010e41373f4dda67b0077709424c047ccc4c019196ce6291fa0d143d31b93c2

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks