General

  • Target

    a362380ff0686afeae0c76aeb0db2deb

  • Size

    323KB

  • Sample

    241111-chnhzszhph

  • MD5

    a362380ff0686afeae0c76aeb0db2deb

  • SHA1

    ffd067b7a34bf4252b1154d0433ea5cf8ee576f5

  • SHA256

    a622f9d4ffea4c4a7e0ea94754c07ac043fd68770237258a00be95d9af68c1e8

  • SHA512

    737d2bb761d32e7fee932c391c49e4ecae1a98613ca1ff0bd2108db4271532e7fe39515bfaf960e5a73811397a70a699bf83c59f8b92f4b4b4ca21f2376b0040

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      a362380ff0686afeae0c76aeb0db2deb

    • Size

      323KB

    • MD5

      a362380ff0686afeae0c76aeb0db2deb

    • SHA1

      ffd067b7a34bf4252b1154d0433ea5cf8ee576f5

    • SHA256

      a622f9d4ffea4c4a7e0ea94754c07ac043fd68770237258a00be95d9af68c1e8

    • SHA512

      737d2bb761d32e7fee932c391c49e4ecae1a98613ca1ff0bd2108db4271532e7fe39515bfaf960e5a73811397a70a699bf83c59f8b92f4b4b4ca21f2376b0040

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks