General

  • Target

    61837be693d4cc1d96e946297e291add

  • Size

    363KB

  • Sample

    241111-c42mqs1bmn

  • MD5

    61837be693d4cc1d96e946297e291add

  • SHA1

    6ed39a15e24c2ef1876b5eb0b5869415a1708f77

  • SHA256

    23697a61f3b3dce35f21d363cdde98f567de97b30bf5e7a9cd7977db7b14a069

  • SHA512

    6abaaa5981ceb29cfb03dc3de2de5788b7fbba0edd946ecf72d5469e4390aba9d825cadb9e319eeec25a22ff74721e6ebb1da4efda808f945c941f57340be27e

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      61837be693d4cc1d96e946297e291add

    • Size

      363KB

    • MD5

      61837be693d4cc1d96e946297e291add

    • SHA1

      6ed39a15e24c2ef1876b5eb0b5869415a1708f77

    • SHA256

      23697a61f3b3dce35f21d363cdde98f567de97b30bf5e7a9cd7977db7b14a069

    • SHA512

      6abaaa5981ceb29cfb03dc3de2de5788b7fbba0edd946ecf72d5469e4390aba9d825cadb9e319eeec25a22ff74721e6ebb1da4efda808f945c941f57340be27e

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks