General

  • Target

    39c6bdd3b69c2ae222af13098998cde38eccf3a5b8779161a7fe9080ef175318

  • Size

    363KB

  • Sample

    241108-ge5qbawhqd

  • MD5

    353fac87eca0c426b7c2895dd9a49e5e

  • SHA1

    50203a0ca773f141ab0ad3026bbaa1c654712cf5

  • SHA256

    39c6bdd3b69c2ae222af13098998cde38eccf3a5b8779161a7fe9080ef175318

  • SHA512

    5f2a6ae02deb1aee822a082d49f573f34bc2fa265e6a12bf98e16e9e0be72147683dac00c062eb7aa2c06891ad79dcd9d70d043d4582ae07e97ab9dffcb348ed

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      39c6bdd3b69c2ae222af13098998cde38eccf3a5b8779161a7fe9080ef175318

    • Size

      363KB

    • MD5

      353fac87eca0c426b7c2895dd9a49e5e

    • SHA1

      50203a0ca773f141ab0ad3026bbaa1c654712cf5

    • SHA256

      39c6bdd3b69c2ae222af13098998cde38eccf3a5b8779161a7fe9080ef175318

    • SHA512

      5f2a6ae02deb1aee822a082d49f573f34bc2fa265e6a12bf98e16e9e0be72147683dac00c062eb7aa2c06891ad79dcd9d70d043d4582ae07e97ab9dffcb348ed

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks