General

  • Target

    67cf27970a4ed74417dbe8e73c38551c91734b7c

  • Size

    304KB

  • Sample

    241111-c7ay7atrdl

  • MD5

    2dea861e117c2b396fecbfdd0055e210

  • SHA1

    67cf27970a4ed74417dbe8e73c38551c91734b7c

  • SHA256

    53b9d76825ab631d5b691b492fdf315ca79629f0b2f891985e7ea7fe0e0da717

  • SHA512

    8f2c7f3cc584ea907504969212fa17f4d13cb9d106f10310b5e7faa8ae5822147e87796e41daedcedec86b814ccfbe7e2800bcf65b7379552011589ba87e7db3

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      67cf27970a4ed74417dbe8e73c38551c91734b7c

    • Size

      304KB

    • MD5

      2dea861e117c2b396fecbfdd0055e210

    • SHA1

      67cf27970a4ed74417dbe8e73c38551c91734b7c

    • SHA256

      53b9d76825ab631d5b691b492fdf315ca79629f0b2f891985e7ea7fe0e0da717

    • SHA512

      8f2c7f3cc584ea907504969212fa17f4d13cb9d106f10310b5e7faa8ae5822147e87796e41daedcedec86b814ccfbe7e2800bcf65b7379552011589ba87e7db3

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks