General

  • Target

    33f4706423bff06e1386ae7acf603d7dbaebd003

  • Size

    363KB

  • Sample

    241108-l79l7azldz

  • MD5

    d94065aaa5b2be5aad4fef4118481238

  • SHA1

    33f4706423bff06e1386ae7acf603d7dbaebd003

  • SHA256

    a1357db09f4b085e67302d1158871470b6b0e901787fda98f81b899d24b8c908

  • SHA512

    33a7891bc758de8149b40d6d95dc81878984eb49d089e13594c544ee2ea78e84d57bf44740f7393cb1cceebb0e3f458da35c4dc14666ed0465b225ef280fceea

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      33f4706423bff06e1386ae7acf603d7dbaebd003

    • Size

      363KB

    • MD5

      d94065aaa5b2be5aad4fef4118481238

    • SHA1

      33f4706423bff06e1386ae7acf603d7dbaebd003

    • SHA256

      a1357db09f4b085e67302d1158871470b6b0e901787fda98f81b899d24b8c908

    • SHA512

      33a7891bc758de8149b40d6d95dc81878984eb49d089e13594c544ee2ea78e84d57bf44740f7393cb1cceebb0e3f458da35c4dc14666ed0465b225ef280fceea

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks