General

  • Target

    498fa5f64d8eca31d8a629d16c6e9eed

  • Size

    364KB

  • Sample

    241108-al25fatlhm

  • MD5

    498fa5f64d8eca31d8a629d16c6e9eed

  • SHA1

    ad1485e0c9f0db53962ed19db28ad7e4d8f4450e

  • SHA256

    ab71532bec522732d3f1181f8cae6a58f82455b53c40a36405b968a2dd827dce

  • SHA512

    ce1509fa0b1d1ad56699c11dff6eddaf23b9a09da2239921a99fc2a3405723cda1e730332d550a1ba59db985dae975df1360902097671f5ca83747f0c420c245

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      498fa5f64d8eca31d8a629d16c6e9eed

    • Size

      364KB

    • MD5

      498fa5f64d8eca31d8a629d16c6e9eed

    • SHA1

      ad1485e0c9f0db53962ed19db28ad7e4d8f4450e

    • SHA256

      ab71532bec522732d3f1181f8cae6a58f82455b53c40a36405b968a2dd827dce

    • SHA512

      ce1509fa0b1d1ad56699c11dff6eddaf23b9a09da2239921a99fc2a3405723cda1e730332d550a1ba59db985dae975df1360902097671f5ca83747f0c420c245

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks