General

  • Target

    9edc6879928f30473ff046805d202bfc555424b44a7571f36938c9069b3a75a2

  • Size

    364KB

  • Sample

    241107-smflyavclg

  • MD5

    15aadd5bbdf590ae1170d60c8459d430

  • SHA1

    189313c5afb25beee9aa3490eef8fab5ed2e737a

  • SHA256

    9edc6879928f30473ff046805d202bfc555424b44a7571f36938c9069b3a75a2

  • SHA512

    164914a077b3735e21a9d1a413ab3f2a025e3253d09b556ce8d7f1611e4be47ee8666da976a9b984865499ddfc7b7257d03fbe8cf5d16fe3097a74fdc90fbbf9

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      9edc6879928f30473ff046805d202bfc555424b44a7571f36938c9069b3a75a2

    • Size

      364KB

    • MD5

      15aadd5bbdf590ae1170d60c8459d430

    • SHA1

      189313c5afb25beee9aa3490eef8fab5ed2e737a

    • SHA256

      9edc6879928f30473ff046805d202bfc555424b44a7571f36938c9069b3a75a2

    • SHA512

      164914a077b3735e21a9d1a413ab3f2a025e3253d09b556ce8d7f1611e4be47ee8666da976a9b984865499ddfc7b7257d03fbe8cf5d16fe3097a74fdc90fbbf9

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks