General

  • Target

    0180ae239c13d6f2182cc571451bac9a6bd8ff09

  • Size

    363KB

  • Sample

    241111-bskz6ssneq

  • MD5

    00d17574778892d057291dd641f6f128

  • SHA1

    0180ae239c13d6f2182cc571451bac9a6bd8ff09

  • SHA256

    f79434df4259a1ff267f82bfb01abe73f8127007287b1ce0af1cf2ae9728e5b2

  • SHA512

    37df0774feeb1ee4583f14606dae44acd80447dc289d0b19da33edc3d8f5549ea0848c20b7396d96ce34a56918923a490ecb7dc40f612d5b6e3973157235190c

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      0180ae239c13d6f2182cc571451bac9a6bd8ff09

    • Size

      363KB

    • MD5

      00d17574778892d057291dd641f6f128

    • SHA1

      0180ae239c13d6f2182cc571451bac9a6bd8ff09

    • SHA256

      f79434df4259a1ff267f82bfb01abe73f8127007287b1ce0af1cf2ae9728e5b2

    • SHA512

      37df0774feeb1ee4583f14606dae44acd80447dc289d0b19da33edc3d8f5549ea0848c20b7396d96ce34a56918923a490ecb7dc40f612d5b6e3973157235190c

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks