General

  • Target

    f7e05de1abe6e7063d71cd3820f43609c61bf6c4feb1453fdc6706ced56bdc1f

  • Size

    363KB

  • Sample

    241108-1k5r2ssrdq

  • MD5

    3065760899a2e80265d24b9670a52b1d

  • SHA1

    9439fc55ee3733371db8baaf4c09605645b447e1

  • SHA256

    f7e05de1abe6e7063d71cd3820f43609c61bf6c4feb1453fdc6706ced56bdc1f

  • SHA512

    b91a78ff88eb007b3e1c0bf6e296a1c119236b1eaa1ae026b1f4d2bac3400c93cc659e90f19b834e8d2d22ca92b0bef8c69e6c3a79352e54eaf97858717d4e46

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      f7e05de1abe6e7063d71cd3820f43609c61bf6c4feb1453fdc6706ced56bdc1f

    • Size

      363KB

    • MD5

      3065760899a2e80265d24b9670a52b1d

    • SHA1

      9439fc55ee3733371db8baaf4c09605645b447e1

    • SHA256

      f7e05de1abe6e7063d71cd3820f43609c61bf6c4feb1453fdc6706ced56bdc1f

    • SHA512

      b91a78ff88eb007b3e1c0bf6e296a1c119236b1eaa1ae026b1f4d2bac3400c93cc659e90f19b834e8d2d22ca92b0bef8c69e6c3a79352e54eaf97858717d4e46

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks