General

  • Target

    868ad73897979c72e9cc4e1070c9dc92431fb6e0

  • Size

    364KB

  • Sample

    241111-bfj74sslem

  • MD5

    985a0af79ac465a2c1b0138d048299fb

  • SHA1

    868ad73897979c72e9cc4e1070c9dc92431fb6e0

  • SHA256

    a35a2775731ad8c772c204d3332286625b0f08cb19eaf03d271e605d2ef59948

  • SHA512

    ec048d26809f4a6b67702f4fce42c8580bc8762fa01b92a7339bb84dc3365f7682b355feda6402dc1fa26a5a6ecbed39aa9f3c0a97d22f8889e85f82a6485302

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      868ad73897979c72e9cc4e1070c9dc92431fb6e0

    • Size

      364KB

    • MD5

      985a0af79ac465a2c1b0138d048299fb

    • SHA1

      868ad73897979c72e9cc4e1070c9dc92431fb6e0

    • SHA256

      a35a2775731ad8c772c204d3332286625b0f08cb19eaf03d271e605d2ef59948

    • SHA512

      ec048d26809f4a6b67702f4fce42c8580bc8762fa01b92a7339bb84dc3365f7682b355feda6402dc1fa26a5a6ecbed39aa9f3c0a97d22f8889e85f82a6485302

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks