General

  • Target

    99de2454d1149044b9a101fc351d1780855ba0915d0dd3d8b340c4a200b46631

  • Size

    364KB

  • Sample

    241106-z8a2xaxlev

  • MD5

    87acd390b5a2d1961a957aa9a6b0979e

  • SHA1

    ab784052118521c3d5cec07b2913a13c40030d69

  • SHA256

    99de2454d1149044b9a101fc351d1780855ba0915d0dd3d8b340c4a200b46631

  • SHA512

    2e6be561e88e1e6593d96043acf415deda9b68ed245130e2e64828169713a85b79f9b41b2e59249aaa23e25ae34f8b8a4019b8b1ee2cdae7591378415044ade0

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      99de2454d1149044b9a101fc351d1780855ba0915d0dd3d8b340c4a200b46631

    • Size

      364KB

    • MD5

      87acd390b5a2d1961a957aa9a6b0979e

    • SHA1

      ab784052118521c3d5cec07b2913a13c40030d69

    • SHA256

      99de2454d1149044b9a101fc351d1780855ba0915d0dd3d8b340c4a200b46631

    • SHA512

      2e6be561e88e1e6593d96043acf415deda9b68ed245130e2e64828169713a85b79f9b41b2e59249aaa23e25ae34f8b8a4019b8b1ee2cdae7591378415044ade0

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks