General

  • Target

    da5054f9fa1a455850a3b76254acaa5a26eaf86c

  • Size

    364KB

  • Sample

    241111-bx4m3sspfk

  • MD5

    ecba1d81f180cb07ed9361dda793c546

  • SHA1

    da5054f9fa1a455850a3b76254acaa5a26eaf86c

  • SHA256

    2ef62c0f51a2b116c9cc280e10635cd21d57047b10f222a8b4be426ee6fa703f

  • SHA512

    068995c4439bfbc203d754cc1eb13d9c1b28a37019e3097cdd04263f5d3d681625fd8f4d12c3e2a943517ccce172e7ba904c6f9efe507e24ff219beec2dcd406

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      da5054f9fa1a455850a3b76254acaa5a26eaf86c

    • Size

      364KB

    • MD5

      ecba1d81f180cb07ed9361dda793c546

    • SHA1

      da5054f9fa1a455850a3b76254acaa5a26eaf86c

    • SHA256

      2ef62c0f51a2b116c9cc280e10635cd21d57047b10f222a8b4be426ee6fa703f

    • SHA512

      068995c4439bfbc203d754cc1eb13d9c1b28a37019e3097cdd04263f5d3d681625fd8f4d12c3e2a943517ccce172e7ba904c6f9efe507e24ff219beec2dcd406

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks