General

  • Target

    4097574ce9e2f337899f77ddc757db5790ff4cab

  • Size

    360KB

  • Sample

    241106-1mk6esycpb

  • MD5

    6ae4edcec65139607384ba950e9d1fd3

  • SHA1

    4097574ce9e2f337899f77ddc757db5790ff4cab

  • SHA256

    fdb34934b11edb50aef1eae30472277f27a226a16fec1639ca7505157aec63b8

  • SHA512

    e871138bb534ce8a15787381f6e24bda8834a61972c47ffee75d99cad1fae4f44df1fec089a3912a9ac61c57fe1b14a552a00224b2013ad831ebbe5619f0a264

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      4097574ce9e2f337899f77ddc757db5790ff4cab

    • Size

      360KB

    • MD5

      6ae4edcec65139607384ba950e9d1fd3

    • SHA1

      4097574ce9e2f337899f77ddc757db5790ff4cab

    • SHA256

      fdb34934b11edb50aef1eae30472277f27a226a16fec1639ca7505157aec63b8

    • SHA512

      e871138bb534ce8a15787381f6e24bda8834a61972c47ffee75d99cad1fae4f44df1fec089a3912a9ac61c57fe1b14a552a00224b2013ad831ebbe5619f0a264

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks