General

  • Target

    6615e0d177c7520b4c0124ffbfd842b3

  • Size

    363KB

  • Sample

    241108-e43adawane

  • MD5

    6615e0d177c7520b4c0124ffbfd842b3

  • SHA1

    0796c6fc87b8ff1a75ec2d9b9f4b53c7fd5b6be1

  • SHA256

    9313eae312e668d7209a62d203fa9030d39b7238b600b2099d5fa828c55544c8

  • SHA512

    8aa4048337aa4b1fc87dc456d5a9aab75ab789838e3cd6053560285c2d852fe342337b21ef46fa9541f8a21783a47b57646bcd520ad6e2a6b58e56340e4c1685

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      6615e0d177c7520b4c0124ffbfd842b3

    • Size

      363KB

    • MD5

      6615e0d177c7520b4c0124ffbfd842b3

    • SHA1

      0796c6fc87b8ff1a75ec2d9b9f4b53c7fd5b6be1

    • SHA256

      9313eae312e668d7209a62d203fa9030d39b7238b600b2099d5fa828c55544c8

    • SHA512

      8aa4048337aa4b1fc87dc456d5a9aab75ab789838e3cd6053560285c2d852fe342337b21ef46fa9541f8a21783a47b57646bcd520ad6e2a6b58e56340e4c1685

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks