General

  • Target

    729959f14dd4089857bf3ce3f76162f02aeb542fa16a430557a4b8b7e35d7d58

  • Size

    360KB

  • Sample

    241107-hxahkazral

  • MD5

    7b900f47481ee392f5849a35daedc034

  • SHA1

    4eb3b80e7ed36509ec130426a08e631bb0b1830e

  • SHA256

    729959f14dd4089857bf3ce3f76162f02aeb542fa16a430557a4b8b7e35d7d58

  • SHA512

    9e4ee91b91c2a4ec6b1b0076b9d0c03ae8068e0f49e36f8df6b6458833b22ce4a01d64708398d75bd9691b0965b7b37a0818b5c61448a3a9e62c4c7fefca0a49

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      729959f14dd4089857bf3ce3f76162f02aeb542fa16a430557a4b8b7e35d7d58

    • Size

      360KB

    • MD5

      7b900f47481ee392f5849a35daedc034

    • SHA1

      4eb3b80e7ed36509ec130426a08e631bb0b1830e

    • SHA256

      729959f14dd4089857bf3ce3f76162f02aeb542fa16a430557a4b8b7e35d7d58

    • SHA512

      9e4ee91b91c2a4ec6b1b0076b9d0c03ae8068e0f49e36f8df6b6458833b22ce4a01d64708398d75bd9691b0965b7b37a0818b5c61448a3a9e62c4c7fefca0a49

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks