General

  • Target

    a82f11636110cdbf5c9a74635f7bf43462b10040

  • Size

    364KB

  • Sample

    241108-gvdlrsxdnp

  • MD5

    6b31dbb668bdef0d904ccbfdaa266816

  • SHA1

    a82f11636110cdbf5c9a74635f7bf43462b10040

  • SHA256

    f501c6fe3a9965d932f08d2d3740c71cbdd073fffb3858397dc02fe60963313b

  • SHA512

    2715d06df2cf2ab229d94269ba4a4a2542ee7cc4fe36a5261ff0b89d6ac021047d10354d988ae800a988136dfe3ed4c56f9c8d9f054ef70821d82ae60ca3c66d

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      a82f11636110cdbf5c9a74635f7bf43462b10040

    • Size

      364KB

    • MD5

      6b31dbb668bdef0d904ccbfdaa266816

    • SHA1

      a82f11636110cdbf5c9a74635f7bf43462b10040

    • SHA256

      f501c6fe3a9965d932f08d2d3740c71cbdd073fffb3858397dc02fe60963313b

    • SHA512

      2715d06df2cf2ab229d94269ba4a4a2542ee7cc4fe36a5261ff0b89d6ac021047d10354d988ae800a988136dfe3ed4c56f9c8d9f054ef70821d82ae60ca3c66d

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks