General

  • Target

    1641f7a474856162e7697d6e398ebdf5

  • Size

    309KB

  • Sample

    241111-cbcsxazgla

  • MD5

    1641f7a474856162e7697d6e398ebdf5

  • SHA1

    902df3928aaa29eda011e99bc0487d7c1ffe27c0

  • SHA256

    b5140d652f1249ced5080d38aa15bfc5b31a94f8d665ee84a6400f88283edc15

  • SHA512

    056e94cd88b895a3d4e4f574897ab7e69e2def7c6e0767808433eb58df6074ff336e11901c30bc3906250b68732b86b98212a6935073de5e31043e5f234aaaa3

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      1641f7a474856162e7697d6e398ebdf5

    • Size

      309KB

    • MD5

      1641f7a474856162e7697d6e398ebdf5

    • SHA1

      902df3928aaa29eda011e99bc0487d7c1ffe27c0

    • SHA256

      b5140d652f1249ced5080d38aa15bfc5b31a94f8d665ee84a6400f88283edc15

    • SHA512

      056e94cd88b895a3d4e4f574897ab7e69e2def7c6e0767808433eb58df6074ff336e11901c30bc3906250b68732b86b98212a6935073de5e31043e5f234aaaa3

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks