General

  • Target

    5e9aa16c0e1864cd073dedbf1e3fda5a887e9913

  • Size

    364KB

  • Sample

    241110-wzpl6aseqa

  • MD5

    2c049dfe82b128b0199eb488f920c9fc

  • SHA1

    5e9aa16c0e1864cd073dedbf1e3fda5a887e9913

  • SHA256

    d9777f2fa4ca212755f2e1e1d46afcaeb090a452490f90ea1db2a54fe21aa51a

  • SHA512

    d6ee228ca31c391b93633804c8885a632804910608efd3f8f03c8156724ed621492dafa855dd205cdbe25b463971e8fbe26f003c00237872b1beff71a7544d22

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      5e9aa16c0e1864cd073dedbf1e3fda5a887e9913

    • Size

      364KB

    • MD5

      2c049dfe82b128b0199eb488f920c9fc

    • SHA1

      5e9aa16c0e1864cd073dedbf1e3fda5a887e9913

    • SHA256

      d9777f2fa4ca212755f2e1e1d46afcaeb090a452490f90ea1db2a54fe21aa51a

    • SHA512

      d6ee228ca31c391b93633804c8885a632804910608efd3f8f03c8156724ed621492dafa855dd205cdbe25b463971e8fbe26f003c00237872b1beff71a7544d22

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks