General

  • Target

    60e81ad71b78c1d4e02dfe6e087635dc31956c6b4ec017ea35d045a3e1ac8c8b

  • Size

    319KB

  • Sample

    241111-hnyh2avhnh

  • MD5

    edf7c9271d114b7bfe442ba882625fa8

  • SHA1

    9ee3122441649d50c37a81274c7cf462a5a2cb46

  • SHA256

    60e81ad71b78c1d4e02dfe6e087635dc31956c6b4ec017ea35d045a3e1ac8c8b

  • SHA512

    f7ee97093fcc81f3a3ba1427462dcc9471912602e6311e7b8419aebd8f2f2c366bb836e3be2d7f06d126fd8860513affa1200b8e88d812db54b9a59fd9e7ee16

  • SSDEEP

    6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

Malware Config

Extracted

Family

redline

Botnet

123

C2

78.153.144.3:2510

Attributes
  • auth_value

    cd6abb0af211bce081d7bf127cc26835

Targets

    • Target

      60e81ad71b78c1d4e02dfe6e087635dc31956c6b4ec017ea35d045a3e1ac8c8b

    • Size

      319KB

    • MD5

      edf7c9271d114b7bfe442ba882625fa8

    • SHA1

      9ee3122441649d50c37a81274c7cf462a5a2cb46

    • SHA256

      60e81ad71b78c1d4e02dfe6e087635dc31956c6b4ec017ea35d045a3e1ac8c8b

    • SHA512

      f7ee97093fcc81f3a3ba1427462dcc9471912602e6311e7b8419aebd8f2f2c366bb836e3be2d7f06d126fd8860513affa1200b8e88d812db54b9a59fd9e7ee16

    • SSDEEP

      6144:eUgLpjp90jrpL6sz42bqrJiZXU+lpEoZ2v3pCLT0mY0:eUg91qjrlJzCUZXU+7E3v5CLTJP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks