General

  • Target

    7b5f9824ae6c351e2a3b2b532967fe4e

  • Size

    364KB

  • Sample

    241107-hrlcwaybjj

  • MD5

    7b5f9824ae6c351e2a3b2b532967fe4e

  • SHA1

    e800d6b3b5c0c04c2a1e644560a548aad0f2f6d0

  • SHA256

    849dfda8ab09405753a1eb25a71d9bb4425d285e8ab1614b8b5b13ffa1a599a2

  • SHA512

    49a7278f756cd7254d5348d6dfdd300b44e4502d6c4f73dbfe0a0103dbd9c121ed969ebbdef4f0f4ce93d64df5b556d01c3566a2bc7d22aead40f9093e84cd11

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      7b5f9824ae6c351e2a3b2b532967fe4e

    • Size

      364KB

    • MD5

      7b5f9824ae6c351e2a3b2b532967fe4e

    • SHA1

      e800d6b3b5c0c04c2a1e644560a548aad0f2f6d0

    • SHA256

      849dfda8ab09405753a1eb25a71d9bb4425d285e8ab1614b8b5b13ffa1a599a2

    • SHA512

      49a7278f756cd7254d5348d6dfdd300b44e4502d6c4f73dbfe0a0103dbd9c121ed969ebbdef4f0f4ce93d64df5b556d01c3566a2bc7d22aead40f9093e84cd11

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks