General

  • Target

    4d0d0314ed3a2f8759b2a453ff9fffe60aa70e06bf9ad759eae88841e5022fcc

  • Size

    338KB

  • Sample

    241104-qsg1vazkez

  • MD5

    1edc13ea0e8983e1bedcada17bc28398

  • SHA1

    3eff0f0e9764efb76f7431a6dfbed4601b5e773e

  • SHA256

    4d0d0314ed3a2f8759b2a453ff9fffe60aa70e06bf9ad759eae88841e5022fcc

  • SHA512

    56295d28eab851136d825293aa665b37f19991c0e8c36995551ed40a3ad0b7af7064b71f736cf96d8a927f12006e8d04ef65c74761a619b3ef34ef2a11b76cd0

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      4d0d0314ed3a2f8759b2a453ff9fffe60aa70e06bf9ad759eae88841e5022fcc

    • Size

      338KB

    • MD5

      1edc13ea0e8983e1bedcada17bc28398

    • SHA1

      3eff0f0e9764efb76f7431a6dfbed4601b5e773e

    • SHA256

      4d0d0314ed3a2f8759b2a453ff9fffe60aa70e06bf9ad759eae88841e5022fcc

    • SHA512

      56295d28eab851136d825293aa665b37f19991c0e8c36995551ed40a3ad0b7af7064b71f736cf96d8a927f12006e8d04ef65c74761a619b3ef34ef2a11b76cd0

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks