General

  • Target

    799681fbac81d7e3b0ae531b3430fe232988105f49c903ec34275c5a5e3de8a8

  • Size

    305KB

  • Sample

    241111-cgp1eszhmd

  • MD5

    b7730e1b49ad4374265af0f78e43eccb

  • SHA1

    f101d79f77290f8da3892d4b7744ea116e134f54

  • SHA256

    799681fbac81d7e3b0ae531b3430fe232988105f49c903ec34275c5a5e3de8a8

  • SHA512

    bfb9ed782c9897c436a43c89ace293cbb58f490dc1b5648a31119022ef3a49de16c558a5bdeb2611beaeb200285e315c100e32557586a44a787f5f83f7322a6f

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      799681fbac81d7e3b0ae531b3430fe232988105f49c903ec34275c5a5e3de8a8

    • Size

      305KB

    • MD5

      b7730e1b49ad4374265af0f78e43eccb

    • SHA1

      f101d79f77290f8da3892d4b7744ea116e134f54

    • SHA256

      799681fbac81d7e3b0ae531b3430fe232988105f49c903ec34275c5a5e3de8a8

    • SHA512

      bfb9ed782c9897c436a43c89ace293cbb58f490dc1b5648a31119022ef3a49de16c558a5bdeb2611beaeb200285e315c100e32557586a44a787f5f83f7322a6f

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks