General

  • Target

    cdf18d12ee0f14b7eb488094a8f6d8c6

  • Size

    364KB

  • Sample

    241107-jbpwssydll

  • MD5

    cdf18d12ee0f14b7eb488094a8f6d8c6

  • SHA1

    960c542f3b4e23986a42ac2635942b9b657b4a2f

  • SHA256

    6bf10f75a995577e39d9b98d71d556f0d351d28b6b63e9e1c9c1337d8e8b0586

  • SHA512

    52a95464e6e983b83239acffba2731d629bea18475181238e404077223b08e07c77c2f317b41640878447f14bb03222e02632123371d775815dc00b2a93f82a0

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      cdf18d12ee0f14b7eb488094a8f6d8c6

    • Size

      364KB

    • MD5

      cdf18d12ee0f14b7eb488094a8f6d8c6

    • SHA1

      960c542f3b4e23986a42ac2635942b9b657b4a2f

    • SHA256

      6bf10f75a995577e39d9b98d71d556f0d351d28b6b63e9e1c9c1337d8e8b0586

    • SHA512

      52a95464e6e983b83239acffba2731d629bea18475181238e404077223b08e07c77c2f317b41640878447f14bb03222e02632123371d775815dc00b2a93f82a0

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks