General

  • Target

    de52229472482a4c094d1aff1f4a2f59b1ea4d1a9a57a05f972dc39c1224938c

  • Size

    360KB

  • Sample

    241111-ewrtnsshqb

  • MD5

    946b66c49bdb1798e9d58d8bf4aa1610

  • SHA1

    c17fb866aa6ca96a8dde549a305f9d6c4ce78f98

  • SHA256

    de52229472482a4c094d1aff1f4a2f59b1ea4d1a9a57a05f972dc39c1224938c

  • SHA512

    74d50b2ef73831bff87b53757ab035ed5bac140aef744b1a3a9155784d953eb74b272c51a916c62631c439da37b8bffdfebaa6bf51966b72cdda3f1f0f300dea

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Targets

    • Target

      de52229472482a4c094d1aff1f4a2f59b1ea4d1a9a57a05f972dc39c1224938c

    • Size

      360KB

    • MD5

      946b66c49bdb1798e9d58d8bf4aa1610

    • SHA1

      c17fb866aa6ca96a8dde549a305f9d6c4ce78f98

    • SHA256

      de52229472482a4c094d1aff1f4a2f59b1ea4d1a9a57a05f972dc39c1224938c

    • SHA512

      74d50b2ef73831bff87b53757ab035ed5bac140aef744b1a3a9155784d953eb74b272c51a916c62631c439da37b8bffdfebaa6bf51966b72cdda3f1f0f300dea

    • SSDEEP

      6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks