General

  • Target

    331779e92e9f9410ddeeedbc479682e8c8d42eb1

  • Size

    363KB

  • Sample

    241106-pf8scsyqcy

  • MD5

    a27531d293953f4ae1b33ddf4296e1e6

  • SHA1

    331779e92e9f9410ddeeedbc479682e8c8d42eb1

  • SHA256

    df1d0bc5bce84727c1b07ac8543d2921e63fd27f9708cc9edae6473774f3009a

  • SHA512

    6ef111ccaa8a78b522702da16eb05b82e5438ed166f135ddf1a79bab2ae66e35355885a059d5466fde07369fb758e6bf8a1eee9a281ac559ad16a2aae7226745

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      331779e92e9f9410ddeeedbc479682e8c8d42eb1

    • Size

      363KB

    • MD5

      a27531d293953f4ae1b33ddf4296e1e6

    • SHA1

      331779e92e9f9410ddeeedbc479682e8c8d42eb1

    • SHA256

      df1d0bc5bce84727c1b07ac8543d2921e63fd27f9708cc9edae6473774f3009a

    • SHA512

      6ef111ccaa8a78b522702da16eb05b82e5438ed166f135ddf1a79bab2ae66e35355885a059d5466fde07369fb758e6bf8a1eee9a281ac559ad16a2aae7226745

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks