General

  • Target

    5b1b3a37b31744f4e76ae24e25d41cbd555aa163

  • Size

    360KB

  • Sample

    241110-y4gs8athmk

  • MD5

    946a852da24c7ea01d2ca5de1e157ddc

  • SHA1

    5b1b3a37b31744f4e76ae24e25d41cbd555aa163

  • SHA256

    f504f616b23f0b1e3d8532fdad3cf1b34ec56ea3c0676088c43f82dce02de72f

  • SHA512

    793d03368b689f55fecaf9f4ab3b2ba716997b58e1c11edb34048277c57eb1b7a63a6745e328db629444a6046e0d6dcf0a886b6059bb2dfa084c64638743362e

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      5b1b3a37b31744f4e76ae24e25d41cbd555aa163

    • Size

      360KB

    • MD5

      946a852da24c7ea01d2ca5de1e157ddc

    • SHA1

      5b1b3a37b31744f4e76ae24e25d41cbd555aa163

    • SHA256

      f504f616b23f0b1e3d8532fdad3cf1b34ec56ea3c0676088c43f82dce02de72f

    • SHA512

      793d03368b689f55fecaf9f4ab3b2ba716997b58e1c11edb34048277c57eb1b7a63a6745e328db629444a6046e0d6dcf0a886b6059bb2dfa084c64638743362e

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks