General

  • Target

    9aa09c43453debf8629a573c152f5850c60b0c743f9f9ed84ee2bdf33b2dc78a

  • Size

    364KB

  • Sample

    241111-djeg5s1hke

  • MD5

    89d3a569263c1ca4548c0af7c0de9e86

  • SHA1

    17ff8ab40ae6e17f248d2fb3adc3e8fd63a9bc43

  • SHA256

    9aa09c43453debf8629a573c152f5850c60b0c743f9f9ed84ee2bdf33b2dc78a

  • SHA512

    e83fad683b49fba6b832cb58aa76ee34ca104b5312a2eb8735f3fafb8cce84266222fd3e196c4f7ac4140e4a0c492794fe322382e73bc5b628ae32aaf4d20b0c

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      9aa09c43453debf8629a573c152f5850c60b0c743f9f9ed84ee2bdf33b2dc78a

    • Size

      364KB

    • MD5

      89d3a569263c1ca4548c0af7c0de9e86

    • SHA1

      17ff8ab40ae6e17f248d2fb3adc3e8fd63a9bc43

    • SHA256

      9aa09c43453debf8629a573c152f5850c60b0c743f9f9ed84ee2bdf33b2dc78a

    • SHA512

      e83fad683b49fba6b832cb58aa76ee34ca104b5312a2eb8735f3fafb8cce84266222fd3e196c4f7ac4140e4a0c492794fe322382e73bc5b628ae32aaf4d20b0c

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks