General

  • Target

    9e1ce28ccfe66f3ea2dfb663d6ed2dc2c737ab7e74a34090f767880f54fd039b

  • Size

    128KB

  • Sample

    241104-1y8qvsybkb

  • MD5

    ba4865835ea7575986a2595151d89ec4

  • SHA1

    871cc562930d79402112c5a354d875afd8de91df

  • SHA256

    9e1ce28ccfe66f3ea2dfb663d6ed2dc2c737ab7e74a34090f767880f54fd039b

  • SHA512

    bb5a596db9e38d8ebc7a5bc4c7fd60abaead8a7e494a7f574b7403ee55fb7c9b1641f6eb28f35206532040a641b70fd25a3b2a469109dbdf0ee5b82f906f5a72

  • SSDEEP

    3072:LUSbA4wtN/tjYdxRZQIHOXtbq2JkdpJY9/cDO:LUZ4MCfRCIu9bJkdplO

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      284f6519e67bd2fcb6fa5c1ed9f915b82cb9e7990a00594fca11c08c016a0d45

    • Size

      339KB

    • MD5

      42c292386924773d0922e3ec19a425ee

    • SHA1

      be665c0c51af872f709a222f50c88fca98a95d6b

    • SHA256

      284f6519e67bd2fcb6fa5c1ed9f915b82cb9e7990a00594fca11c08c016a0d45

    • SHA512

      f56261203fdb7f33519050d0ce0940e1de0346000e0bed45896c47d16828e16f9ecd8f54c310b43928fa59f7a1bb9a6088a8c9ffb99b9b4b96231a18c00966df

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks