General

  • Target

    339854483753c0a2365167c44c60fc14f4eedc03

  • Size

    363KB

  • Sample

    241108-becfwa1hrg

  • MD5

    a21e4f91a03ab984ac2bb29f2fd39d56

  • SHA1

    339854483753c0a2365167c44c60fc14f4eedc03

  • SHA256

    5e96dece7773205e8e111f818b6ccc74c4a49bcba70ec9dea7e50bd5d6fa497d

  • SHA512

    dd6660b10a68eb7c3b45267cae6e4ebb214a5f08f5828d782e6557ca6d856a6f15c9ff01e90fedb4582bdfcdab0ccd1648a88020115417c6705ee59be197465f

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      339854483753c0a2365167c44c60fc14f4eedc03

    • Size

      363KB

    • MD5

      a21e4f91a03ab984ac2bb29f2fd39d56

    • SHA1

      339854483753c0a2365167c44c60fc14f4eedc03

    • SHA256

      5e96dece7773205e8e111f818b6ccc74c4a49bcba70ec9dea7e50bd5d6fa497d

    • SHA512

      dd6660b10a68eb7c3b45267cae6e4ebb214a5f08f5828d782e6557ca6d856a6f15c9ff01e90fedb4582bdfcdab0ccd1648a88020115417c6705ee59be197465f

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks