General

  • Target

    29b6da31eccdc386e24986b69c73bca2d5e2600c9f50e4bc17546201d527a732

  • Size

    360KB

  • Sample

    241108-g1m3dsxelq

  • MD5

    7a13f76c6af777c67b97696592da06e2

  • SHA1

    51bb24ec7a772665a271c3598c664742c2ee0b18

  • SHA256

    29b6da31eccdc386e24986b69c73bca2d5e2600c9f50e4bc17546201d527a732

  • SHA512

    cc865d43373040f26f2d8e147011749ef89619acef21559219627d97d29c6835ce03af25718fd756eb37d6c22a579ffd2d5cc29760aea60a6e3122cd9c847877

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      29b6da31eccdc386e24986b69c73bca2d5e2600c9f50e4bc17546201d527a732

    • Size

      360KB

    • MD5

      7a13f76c6af777c67b97696592da06e2

    • SHA1

      51bb24ec7a772665a271c3598c664742c2ee0b18

    • SHA256

      29b6da31eccdc386e24986b69c73bca2d5e2600c9f50e4bc17546201d527a732

    • SHA512

      cc865d43373040f26f2d8e147011749ef89619acef21559219627d97d29c6835ce03af25718fd756eb37d6c22a579ffd2d5cc29760aea60a6e3122cd9c847877

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks