General

  • Target

    6a0e98eb16d6c4dd62cfb99e63a32d9dd43e6dde

  • Size

    314KB

  • Sample

    241111-gj1bdsxngj

  • MD5

    280934194743cba57251c37e2cb0d4f3

  • SHA1

    6a0e98eb16d6c4dd62cfb99e63a32d9dd43e6dde

  • SHA256

    8af5f51f2b3232a66c0c473c368e4f01ceeac9c22f7b2ab51c73db0cf28dc9e2

  • SHA512

    bef7217ae9311abff0e505ba6f5dd82f93e03cb2e35c22667437d0f30f6bf7dc39fe9e5f2d33bd5032aaba97e5c0b168de2e8cb0fc32102e42543a839e364c6e

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      6a0e98eb16d6c4dd62cfb99e63a32d9dd43e6dde

    • Size

      314KB

    • MD5

      280934194743cba57251c37e2cb0d4f3

    • SHA1

      6a0e98eb16d6c4dd62cfb99e63a32d9dd43e6dde

    • SHA256

      8af5f51f2b3232a66c0c473c368e4f01ceeac9c22f7b2ab51c73db0cf28dc9e2

    • SHA512

      bef7217ae9311abff0e505ba6f5dd82f93e03cb2e35c22667437d0f30f6bf7dc39fe9e5f2d33bd5032aaba97e5c0b168de2e8cb0fc32102e42543a839e364c6e

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks