General

  • Target

    734cf60927e77d3a809149617f993b45

  • Size

    363KB

  • Sample

    241106-zxjvnsxgne

  • MD5

    734cf60927e77d3a809149617f993b45

  • SHA1

    827b82aa532feb1de368e6d038f04098b1eba4c8

  • SHA256

    7ef124c356735b8e59ded5b6c67b0f27b3a795319691fad7fae77af5c8a6d2de

  • SHA512

    1924d851f6bcd976ccae61adf84fd53ec982d55fa4361abdd1b4f8394eeae40be9e74ede122967470a41a1ea8f390de7259a10465da5a6b0e337b1e9a5dd6a97

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      734cf60927e77d3a809149617f993b45

    • Size

      363KB

    • MD5

      734cf60927e77d3a809149617f993b45

    • SHA1

      827b82aa532feb1de368e6d038f04098b1eba4c8

    • SHA256

      7ef124c356735b8e59ded5b6c67b0f27b3a795319691fad7fae77af5c8a6d2de

    • SHA512

      1924d851f6bcd976ccae61adf84fd53ec982d55fa4361abdd1b4f8394eeae40be9e74ede122967470a41a1ea8f390de7259a10465da5a6b0e337b1e9a5dd6a97

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks