General

  • Target

    dd4be1130fc941385396c8bcd165e0de866d0534f694304354e8bc8bb6483a43

  • Size

    364KB

  • Sample

    241111-d6agpssaqp

  • MD5

    22e361dd361638232af81f5c9d758fe0

  • SHA1

    5cccf8a53b46acc07a655cd5a5c0fc0872e2a503

  • SHA256

    dd4be1130fc941385396c8bcd165e0de866d0534f694304354e8bc8bb6483a43

  • SHA512

    6a49285b9717b229fe22f9767879fc9baaa89a224597655b8e5814606f2f4939131c08c37f9a456e95a27e6b4cb1a9e63dbe849030d61f3c5f2ed094954b7c31

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      dd4be1130fc941385396c8bcd165e0de866d0534f694304354e8bc8bb6483a43

    • Size

      364KB

    • MD5

      22e361dd361638232af81f5c9d758fe0

    • SHA1

      5cccf8a53b46acc07a655cd5a5c0fc0872e2a503

    • SHA256

      dd4be1130fc941385396c8bcd165e0de866d0534f694304354e8bc8bb6483a43

    • SHA512

      6a49285b9717b229fe22f9767879fc9baaa89a224597655b8e5814606f2f4939131c08c37f9a456e95a27e6b4cb1a9e63dbe849030d61f3c5f2ed094954b7c31

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks