General

  • Target

    922f48a22a7896035a779ba3e915650c

  • Size

    363KB

  • Sample

    241108-gr8mqsxdkk

  • MD5

    922f48a22a7896035a779ba3e915650c

  • SHA1

    8043545022276a6db90f3f40431874a9d1e31624

  • SHA256

    c52597ad505b98b1b53abc28f1d6d1d6ea6c9bca5f89878d1abb6f9fc2017aa4

  • SHA512

    e4aa6e668d2392ef27bf441e0d5130f7aad8af355fe2097e7099cce60fff22688e46355c4bc734016726a747c90975e9c2d514f1082e246923a768516b2e6e8e

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      922f48a22a7896035a779ba3e915650c

    • Size

      363KB

    • MD5

      922f48a22a7896035a779ba3e915650c

    • SHA1

      8043545022276a6db90f3f40431874a9d1e31624

    • SHA256

      c52597ad505b98b1b53abc28f1d6d1d6ea6c9bca5f89878d1abb6f9fc2017aa4

    • SHA512

      e4aa6e668d2392ef27bf441e0d5130f7aad8af355fe2097e7099cce60fff22688e46355c4bc734016726a747c90975e9c2d514f1082e246923a768516b2e6e8e

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks