General

  • Target

    d03e3ed7329ae47dac8b523ff5124b28e7105bc474f5321d098c6d29c13c449e

  • Size

    339KB

  • Sample

    241104-1zjhcsyemk

  • MD5

    9b3a8b7b9c6cf373019d606ce8cfdf41

  • SHA1

    0fd6375efb32e591fdc3068c9442ebd8db53d977

  • SHA256

    d03e3ed7329ae47dac8b523ff5124b28e7105bc474f5321d098c6d29c13c449e

  • SHA512

    8bbc086b51bb0c0ec6e6cb3973b789d0eac4b9bc1000ec5bd6b0c7bb16f9b958ba88eee2b5011504275cba1f5096e556a2c54c5af3de95858b07aed0ac6fbff1

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      d03e3ed7329ae47dac8b523ff5124b28e7105bc474f5321d098c6d29c13c449e

    • Size

      339KB

    • MD5

      9b3a8b7b9c6cf373019d606ce8cfdf41

    • SHA1

      0fd6375efb32e591fdc3068c9442ebd8db53d977

    • SHA256

      d03e3ed7329ae47dac8b523ff5124b28e7105bc474f5321d098c6d29c13c449e

    • SHA512

      8bbc086b51bb0c0ec6e6cb3973b789d0eac4b9bc1000ec5bd6b0c7bb16f9b958ba88eee2b5011504275cba1f5096e556a2c54c5af3de95858b07aed0ac6fbff1

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks