General

  • Target

    d798c29d64f334a27bdd9cf89d6f21fc

  • Size

    364KB

  • Sample

    241111-dnmpbavmcl

  • MD5

    d798c29d64f334a27bdd9cf89d6f21fc

  • SHA1

    6811552e071bc3b3955ca3fe8db209908caecc53

  • SHA256

    b271672cd62ab8abfe62edf3a27ec65f1a7a5b0cd5cfd8224510a7be78a554de

  • SHA512

    0794e0fdf46a40f8a255e35cf5907311c91cace130def4a8f0c2fcec5cd3e6c82d8f09f36505a950b8f63c2ecfa8569790cefca28d6f6791cce22ac469ed856e

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      d798c29d64f334a27bdd9cf89d6f21fc

    • Size

      364KB

    • MD5

      d798c29d64f334a27bdd9cf89d6f21fc

    • SHA1

      6811552e071bc3b3955ca3fe8db209908caecc53

    • SHA256

      b271672cd62ab8abfe62edf3a27ec65f1a7a5b0cd5cfd8224510a7be78a554de

    • SHA512

      0794e0fdf46a40f8a255e35cf5907311c91cace130def4a8f0c2fcec5cd3e6c82d8f09f36505a950b8f63c2ecfa8569790cefca28d6f6791cce22ac469ed856e

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks