General

  • Target

    aed1290e46c0838fa7e83257b6acd00363cd6d01

  • Size

    363KB

  • Sample

    241108-f4bcbswfra

  • MD5

    053b4e6e788fe6f096a2aa0590f329da

  • SHA1

    aed1290e46c0838fa7e83257b6acd00363cd6d01

  • SHA256

    e3ea22b48c84096d6526d5706a2d64c3bd80f49ee85fd6696fcfc6140f26af39

  • SHA512

    b3e3966da67725d1b453ca3296d583aef2489d1663777437a2054bc6a608fc4881ec6cf4fddf1fd2869b74b8466e0a20863dec4f28fcf9fd6b959e4dc9e78e97

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      aed1290e46c0838fa7e83257b6acd00363cd6d01

    • Size

      363KB

    • MD5

      053b4e6e788fe6f096a2aa0590f329da

    • SHA1

      aed1290e46c0838fa7e83257b6acd00363cd6d01

    • SHA256

      e3ea22b48c84096d6526d5706a2d64c3bd80f49ee85fd6696fcfc6140f26af39

    • SHA512

      b3e3966da67725d1b453ca3296d583aef2489d1663777437a2054bc6a608fc4881ec6cf4fddf1fd2869b74b8466e0a20863dec4f28fcf9fd6b959e4dc9e78e97

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks