General

  • Target

    ac5f2f9eee322e7682e1858b19d9d542a7f5f918

  • Size

    364KB

  • Sample

    241108-yrsd7axqay

  • MD5

    40227789ada1553e33b667bed051c95a

  • SHA1

    ac5f2f9eee322e7682e1858b19d9d542a7f5f918

  • SHA256

    0d07c52540beb0a9e4b724c6f79da6a121fb523a8e61a7df3a9e6090e1fef0c2

  • SHA512

    a6ecfef7b8b70292a53544c244d0282c1b632ecfced4abcedb88fc5a96233029630096acb740a437f28eeb2fd50587f7597d5dbd3b47ec2cbe638bac45e7e668

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      ac5f2f9eee322e7682e1858b19d9d542a7f5f918

    • Size

      364KB

    • MD5

      40227789ada1553e33b667bed051c95a

    • SHA1

      ac5f2f9eee322e7682e1858b19d9d542a7f5f918

    • SHA256

      0d07c52540beb0a9e4b724c6f79da6a121fb523a8e61a7df3a9e6090e1fef0c2

    • SHA512

      a6ecfef7b8b70292a53544c244d0282c1b632ecfced4abcedb88fc5a96233029630096acb740a437f28eeb2fd50587f7597d5dbd3b47ec2cbe638bac45e7e668

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks