General

  • Target

    5e57d4ca4615b35a2f74317194161e2d

  • Size

    360KB

  • Sample

    241108-ljzr3szfpc

  • MD5

    5e57d4ca4615b35a2f74317194161e2d

  • SHA1

    b35f2fce55b966213e6f801a11befcc2b0c9a78b

  • SHA256

    c249f1e68850d1074d3e7b61480eb173b4a15c1ee1a19829dc28b4035c5ce509

  • SHA512

    3befc1826d104d989b0a61fa0b3aa8127d6e2d63d79b759d90734b642d5eb932e2fbc8ec210f728bc4c18d3fd42c8f3c0be9f60b104fe6767e930b71e6fbe3c2

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      5e57d4ca4615b35a2f74317194161e2d

    • Size

      360KB

    • MD5

      5e57d4ca4615b35a2f74317194161e2d

    • SHA1

      b35f2fce55b966213e6f801a11befcc2b0c9a78b

    • SHA256

      c249f1e68850d1074d3e7b61480eb173b4a15c1ee1a19829dc28b4035c5ce509

    • SHA512

      3befc1826d104d989b0a61fa0b3aa8127d6e2d63d79b759d90734b642d5eb932e2fbc8ec210f728bc4c18d3fd42c8f3c0be9f60b104fe6767e930b71e6fbe3c2

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks