General

  • Target

    f40f477e437834f598795ae5c9327bd95361fcc7

  • Size

    312KB

  • Sample

    241111-cjxhaazjbz

  • MD5

    503a982da7fce33c3f9b750ada07f0d1

  • SHA1

    f40f477e437834f598795ae5c9327bd95361fcc7

  • SHA256

    33e11df08e6028d1f76e4e364d8a865ef4be4cc3ccc5341b0095deae9fb97357

  • SHA512

    3d3bd74c9233c866c599a597d1ec66cb085cbef13f2d2c6f6b73b3b40b9b7028608cc3a1b759dd2dbcdd3df9e035970fc9ebedc31e3b57621f414d506d51f1ac

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      f40f477e437834f598795ae5c9327bd95361fcc7

    • Size

      312KB

    • MD5

      503a982da7fce33c3f9b750ada07f0d1

    • SHA1

      f40f477e437834f598795ae5c9327bd95361fcc7

    • SHA256

      33e11df08e6028d1f76e4e364d8a865ef4be4cc3ccc5341b0095deae9fb97357

    • SHA512

      3d3bd74c9233c866c599a597d1ec66cb085cbef13f2d2c6f6b73b3b40b9b7028608cc3a1b759dd2dbcdd3df9e035970fc9ebedc31e3b57621f414d506d51f1ac

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks