General

  • Target

    c5b8eea1a704aa3042d9fe4d700e3642

  • Size

    364KB

  • Sample

    241108-zsp6wszclc

  • MD5

    c5b8eea1a704aa3042d9fe4d700e3642

  • SHA1

    bbd0bd7701d0fc6399114833e4bd812bb7318c89

  • SHA256

    9b633992ceb780da87991e28123b05822e0078a452648eec40d78c1e23a64d8d

  • SHA512

    c3fb262ba761351ab6f0d34a248d7ff12e69242735a82148d1178853546375966ae9125f5e2cbe490ffd5c22cf4794cb088cab19a927eab645dfb0cbf53c4abe

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      c5b8eea1a704aa3042d9fe4d700e3642

    • Size

      364KB

    • MD5

      c5b8eea1a704aa3042d9fe4d700e3642

    • SHA1

      bbd0bd7701d0fc6399114833e4bd812bb7318c89

    • SHA256

      9b633992ceb780da87991e28123b05822e0078a452648eec40d78c1e23a64d8d

    • SHA512

      c3fb262ba761351ab6f0d34a248d7ff12e69242735a82148d1178853546375966ae9125f5e2cbe490ffd5c22cf4794cb088cab19a927eab645dfb0cbf53c4abe

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks