General

  • Target

    4cafd223a3822877418087b940fc89c1f587cd5e1f4ebc99672163f6534791c6

  • Size

    338KB

  • Sample

    241104-2477yszalf

  • MD5

    27e125d52189b7669744f631e53ddbfc

  • SHA1

    0c570f29b4e0057d3c5562c5f6c6e17013d87d9a

  • SHA256

    4cafd223a3822877418087b940fc89c1f587cd5e1f4ebc99672163f6534791c6

  • SHA512

    a4bd1edfc6a5b2e101b10c75d9fed8d44bd1073bf5c7c114659b120b99029de5c920276ea4d651254c3402baf38172fc3776a85317397229456e3ff20b90972f

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      4cafd223a3822877418087b940fc89c1f587cd5e1f4ebc99672163f6534791c6

    • Size

      338KB

    • MD5

      27e125d52189b7669744f631e53ddbfc

    • SHA1

      0c570f29b4e0057d3c5562c5f6c6e17013d87d9a

    • SHA256

      4cafd223a3822877418087b940fc89c1f587cd5e1f4ebc99672163f6534791c6

    • SHA512

      a4bd1edfc6a5b2e101b10c75d9fed8d44bd1073bf5c7c114659b120b99029de5c920276ea4d651254c3402baf38172fc3776a85317397229456e3ff20b90972f

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks