General

  • Target

    61e43211599f635570142900f3a1035da024b8cf59422bbb691cc3969beea8c9

  • Size

    363KB

  • Sample

    241110-b1g89awkdx

  • MD5

    b81c1d3ec82131ddadc0e166489caaa5

  • SHA1

    197927b0936d9b779adbe4cd4cdffde7563df84b

  • SHA256

    61e43211599f635570142900f3a1035da024b8cf59422bbb691cc3969beea8c9

  • SHA512

    c8fe79727e0a4dece31eb840274b688c36b52b3030e0a45a42b422ace6c9243536ba57ccccdc30ba4f7501042733fa64f55b17af32ec6533deafeeecc6b64c21

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      61e43211599f635570142900f3a1035da024b8cf59422bbb691cc3969beea8c9

    • Size

      363KB

    • MD5

      b81c1d3ec82131ddadc0e166489caaa5

    • SHA1

      197927b0936d9b779adbe4cd4cdffde7563df84b

    • SHA256

      61e43211599f635570142900f3a1035da024b8cf59422bbb691cc3969beea8c9

    • SHA512

      c8fe79727e0a4dece31eb840274b688c36b52b3030e0a45a42b422ace6c9243536ba57ccccdc30ba4f7501042733fa64f55b17af32ec6533deafeeecc6b64c21

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks