General

  • Target

    49ffeb2384e5c27e3e81eac6efd8f110d64f760b

  • Size

    360KB

  • Sample

    241108-1vwxws1bmq

  • MD5

    3ce5634280ee7cb9a6c7766604243fbd

  • SHA1

    49ffeb2384e5c27e3e81eac6efd8f110d64f760b

  • SHA256

    f64f6bb72613d0aeb335611cca454801dc01de1705bdc339d9a86daa7f5598eb

  • SHA512

    61ea6894c8d081bfcffd350d17d8d5923f398f3930db39cad67219a5d9eca04cd8643bfd8356b8e786fdd5e898bc471672df8cebd2b6c60ddbd07634958e6df8

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      49ffeb2384e5c27e3e81eac6efd8f110d64f760b

    • Size

      360KB

    • MD5

      3ce5634280ee7cb9a6c7766604243fbd

    • SHA1

      49ffeb2384e5c27e3e81eac6efd8f110d64f760b

    • SHA256

      f64f6bb72613d0aeb335611cca454801dc01de1705bdc339d9a86daa7f5598eb

    • SHA512

      61ea6894c8d081bfcffd350d17d8d5923f398f3930db39cad67219a5d9eca04cd8643bfd8356b8e786fdd5e898bc471672df8cebd2b6c60ddbd07634958e6df8

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks