General

  • Target

    838d8ceee20909820642c8f121af23b4

  • Size

    360KB

  • Sample

    241108-n2lpaatrcn

  • MD5

    838d8ceee20909820642c8f121af23b4

  • SHA1

    e08bba521c3f61013e51cd691c8169b48aaaeaf7

  • SHA256

    9435c4701a7c48c01841f35b9b8cbdc5889a89b86f16f41fd154e0e34a2b1974

  • SHA512

    2b57947f049e8a1fead7caf49e9b860dd1a8fbf7549a7f1e22edb42b7a9a10e38475d0f01c6a30f81503980c2a949a49514418a9a3f7b62728040b45f0ab3728

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      838d8ceee20909820642c8f121af23b4

    • Size

      360KB

    • MD5

      838d8ceee20909820642c8f121af23b4

    • SHA1

      e08bba521c3f61013e51cd691c8169b48aaaeaf7

    • SHA256

      9435c4701a7c48c01841f35b9b8cbdc5889a89b86f16f41fd154e0e34a2b1974

    • SHA512

      2b57947f049e8a1fead7caf49e9b860dd1a8fbf7549a7f1e22edb42b7a9a10e38475d0f01c6a30f81503980c2a949a49514418a9a3f7b62728040b45f0ab3728

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks