General

  • Target

    39a76f7c4d04da000e58c4bf0348f7bb63ed12f5

  • Size

    364KB

  • Sample

    241111-b2zjxszbkq

  • MD5

    dc623b6d7ae6316ba0ffcd017c21fc05

  • SHA1

    39a76f7c4d04da000e58c4bf0348f7bb63ed12f5

  • SHA256

    3f764cf137f3ba96c440c3971c55e24ba36bdefd412ffbf1cc388cc1248de565

  • SHA512

    681e4af8e5f711d4ddab344f93bcb1e926f35c9f7e28d41f77a6810917c3c32da0f038774f7f01b67153218cda3c3c80a03b9c826cfadc0d1d71f70d1761d159

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      39a76f7c4d04da000e58c4bf0348f7bb63ed12f5

    • Size

      364KB

    • MD5

      dc623b6d7ae6316ba0ffcd017c21fc05

    • SHA1

      39a76f7c4d04da000e58c4bf0348f7bb63ed12f5

    • SHA256

      3f764cf137f3ba96c440c3971c55e24ba36bdefd412ffbf1cc388cc1248de565

    • SHA512

      681e4af8e5f711d4ddab344f93bcb1e926f35c9f7e28d41f77a6810917c3c32da0f038774f7f01b67153218cda3c3c80a03b9c826cfadc0d1d71f70d1761d159

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks