General

  • Target

    fac4155ca1e544e235acd68b2d719f04

  • Size

    361KB

  • Sample

    241110-w5qreascqq

  • MD5

    fac4155ca1e544e235acd68b2d719f04

  • SHA1

    7b521339eeeb9cd93b433686effb1a44c038862e

  • SHA256

    e1c373f9a995525a5a0aa15cad69e35ddb5ac0cb9955d104aa679fb9ca10fae1

  • SHA512

    1c5380bfa73d901155e08d694350a38fc768344a99c4e6ad715879515fbad3b359b5505adef49eb236fbeaf5b382c9f72cee0e9f3956b99a079a7ee08305c66b

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      fac4155ca1e544e235acd68b2d719f04

    • Size

      361KB

    • MD5

      fac4155ca1e544e235acd68b2d719f04

    • SHA1

      7b521339eeeb9cd93b433686effb1a44c038862e

    • SHA256

      e1c373f9a995525a5a0aa15cad69e35ddb5ac0cb9955d104aa679fb9ca10fae1

    • SHA512

      1c5380bfa73d901155e08d694350a38fc768344a99c4e6ad715879515fbad3b359b5505adef49eb236fbeaf5b382c9f72cee0e9f3956b99a079a7ee08305c66b

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks