General

  • Target

    2b676e68e8a1e16111cba125ed41a784

  • Size

    364KB

  • Sample

    241106-171rls1nfl

  • MD5

    2b676e68e8a1e16111cba125ed41a784

  • SHA1

    ac3aa7793e1582fa4c3e2842484120504390ee8d

  • SHA256

    234d9432b06e3f3d5d8ad399f5cc7854d3ad1652ade8e14acaba6f3ee930c492

  • SHA512

    551b5b1cf1abb594cf078fd795bd6813ac27f0b761c1fae2d727fd0dac28002e761040e362e9a9165bf6c6a075550c59efab4d0a15c0bed9cdfdf15c8ae7537e

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      2b676e68e8a1e16111cba125ed41a784

    • Size

      364KB

    • MD5

      2b676e68e8a1e16111cba125ed41a784

    • SHA1

      ac3aa7793e1582fa4c3e2842484120504390ee8d

    • SHA256

      234d9432b06e3f3d5d8ad399f5cc7854d3ad1652ade8e14acaba6f3ee930c492

    • SHA512

      551b5b1cf1abb594cf078fd795bd6813ac27f0b761c1fae2d727fd0dac28002e761040e362e9a9165bf6c6a075550c59efab4d0a15c0bed9cdfdf15c8ae7537e

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks