General

  • Target

    c7904b3ad9f9c5ff2ff33a9b9f61ec99a8024047ee5377c953b56390d715b371

  • Size

    339KB

  • Sample

    241104-1tlqjaxnb1

  • MD5

    ded9fa466a7e7182198c93deba5e420e

  • SHA1

    8186e464af7a4fd35f75d5a222f80ef24576a148

  • SHA256

    c7904b3ad9f9c5ff2ff33a9b9f61ec99a8024047ee5377c953b56390d715b371

  • SHA512

    e4254a3ff211de7a26c98f583058afef80b0753ec1528e1ad2ebff764bd724e87c23de3ea2d1e16b7f2a41613f9350a5b3cb0da5923efd8fd8c1bb14303fa93f

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      c7904b3ad9f9c5ff2ff33a9b9f61ec99a8024047ee5377c953b56390d715b371

    • Size

      339KB

    • MD5

      ded9fa466a7e7182198c93deba5e420e

    • SHA1

      8186e464af7a4fd35f75d5a222f80ef24576a148

    • SHA256

      c7904b3ad9f9c5ff2ff33a9b9f61ec99a8024047ee5377c953b56390d715b371

    • SHA512

      e4254a3ff211de7a26c98f583058afef80b0753ec1528e1ad2ebff764bd724e87c23de3ea2d1e16b7f2a41613f9350a5b3cb0da5923efd8fd8c1bb14303fa93f

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks