General

  • Target

    89c1400377f105d78f02f08af3e741f1c3a3d225

  • Size

    364KB

  • Sample

    241111-bgw83azbkg

  • MD5

    610aea7838ae05962a9d4ef80f0225a6

  • SHA1

    89c1400377f105d78f02f08af3e741f1c3a3d225

  • SHA256

    0298d172e61aca7e26f6a529415da94f347dcdf1b06a6b2ebcf8d8d7799f41c9

  • SHA512

    4741641d65334e77b2b40e265b8f5f65a04dd3b06b11feeeac69a6689c6d424a1ae5f431bd69280151151b82903e2362327d7970d663fccdc33850b95a51cd44

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      89c1400377f105d78f02f08af3e741f1c3a3d225

    • Size

      364KB

    • MD5

      610aea7838ae05962a9d4ef80f0225a6

    • SHA1

      89c1400377f105d78f02f08af3e741f1c3a3d225

    • SHA256

      0298d172e61aca7e26f6a529415da94f347dcdf1b06a6b2ebcf8d8d7799f41c9

    • SHA512

      4741641d65334e77b2b40e265b8f5f65a04dd3b06b11feeeac69a6689c6d424a1ae5f431bd69280151151b82903e2362327d7970d663fccdc33850b95a51cd44

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks