General

  • Target

    197adfec7b2ad998f2f142bdbb4d6f6f63c24eb5ce1deb7c3ad206f71bd0bcfe

  • Size

    363KB

  • Sample

    241108-efgzjavepl

  • MD5

    e19692cce06f14c8a5e5dbe267c2946e

  • SHA1

    9da1754e208ac3f7f2a289255deef9f65bc6c5b7

  • SHA256

    197adfec7b2ad998f2f142bdbb4d6f6f63c24eb5ce1deb7c3ad206f71bd0bcfe

  • SHA512

    55af6b5922c34f5bf1cb24b26261a78c5d03c0575e1f6426b3bd3ce4399697f7140afbed8a29a18b7ac0cf54d219af5373ab7720a3bfa8990af6a37874222639

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      197adfec7b2ad998f2f142bdbb4d6f6f63c24eb5ce1deb7c3ad206f71bd0bcfe

    • Size

      363KB

    • MD5

      e19692cce06f14c8a5e5dbe267c2946e

    • SHA1

      9da1754e208ac3f7f2a289255deef9f65bc6c5b7

    • SHA256

      197adfec7b2ad998f2f142bdbb4d6f6f63c24eb5ce1deb7c3ad206f71bd0bcfe

    • SHA512

      55af6b5922c34f5bf1cb24b26261a78c5d03c0575e1f6426b3bd3ce4399697f7140afbed8a29a18b7ac0cf54d219af5373ab7720a3bfa8990af6a37874222639

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks