General

  • Target

    a757c11ef5a2b1667f0cbc1acc9f2cdecd9e68f2

  • Size

    364KB

  • Sample

    241106-pp85gssnar

  • MD5

    2191e00d2f175985acf29c840ed716e5

  • SHA1

    a757c11ef5a2b1667f0cbc1acc9f2cdecd9e68f2

  • SHA256

    c69a2fd90919313e41fb8796cd651ffc9221761d7f0fc6187d848a0d15377080

  • SHA512

    88d9af00401f40ffa58b9e6f69915651455e8364bc4c5ec001de90c7445d2a2b97688106e7d5d563ce3011898ac27b395ecd8c6c1585244287eddc54e7ff9508

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      a757c11ef5a2b1667f0cbc1acc9f2cdecd9e68f2

    • Size

      364KB

    • MD5

      2191e00d2f175985acf29c840ed716e5

    • SHA1

      a757c11ef5a2b1667f0cbc1acc9f2cdecd9e68f2

    • SHA256

      c69a2fd90919313e41fb8796cd651ffc9221761d7f0fc6187d848a0d15377080

    • SHA512

      88d9af00401f40ffa58b9e6f69915651455e8364bc4c5ec001de90c7445d2a2b97688106e7d5d563ce3011898ac27b395ecd8c6c1585244287eddc54e7ff9508

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks