General

  • Target

    4b3e385223979c9133710e35432a3e990c58f96a

  • Size

    363KB

  • Sample

    241107-l6fygs1ajn

  • MD5

    771264ee174d55a23f3ca09d99759d09

  • SHA1

    4b3e385223979c9133710e35432a3e990c58f96a

  • SHA256

    f6191f765607cef137338dd4f59f494357c2c5a18e137c71a492298b7a94fb7a

  • SHA512

    097e038a02b59a1f4d6c76c6b55dda27522c05d57d35958e4e002dffe18151633317adcf00ef7e8d6b1d314f2c8efff4b7ae88659d886daca4525f106b809501

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      4b3e385223979c9133710e35432a3e990c58f96a

    • Size

      363KB

    • MD5

      771264ee174d55a23f3ca09d99759d09

    • SHA1

      4b3e385223979c9133710e35432a3e990c58f96a

    • SHA256

      f6191f765607cef137338dd4f59f494357c2c5a18e137c71a492298b7a94fb7a

    • SHA512

      097e038a02b59a1f4d6c76c6b55dda27522c05d57d35958e4e002dffe18151633317adcf00ef7e8d6b1d314f2c8efff4b7ae88659d886daca4525f106b809501

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks