General

  • Target

    04f357d81d4457605c6ba228b12d745831f08978d9588f95075a1acdad393c12

  • Size

    340KB

  • Sample

    241104-rkj1xa1flk

  • MD5

    203556259b4e6e426f5dddec1c72c16c

  • SHA1

    64b4a9f66931d90dcc2d64e16a0ef6e80c99fe8a

  • SHA256

    04f357d81d4457605c6ba228b12d745831f08978d9588f95075a1acdad393c12

  • SHA512

    6296edaa59c267367137fdaef5968811fb95f81cad4d6a916b88bf085377fd438dad3b7dc905528b16a471b37871cbc54c9c3fdddfa6fc55901f39256af25117

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      04f357d81d4457605c6ba228b12d745831f08978d9588f95075a1acdad393c12

    • Size

      340KB

    • MD5

      203556259b4e6e426f5dddec1c72c16c

    • SHA1

      64b4a9f66931d90dcc2d64e16a0ef6e80c99fe8a

    • SHA256

      04f357d81d4457605c6ba228b12d745831f08978d9588f95075a1acdad393c12

    • SHA512

      6296edaa59c267367137fdaef5968811fb95f81cad4d6a916b88bf085377fd438dad3b7dc905528b16a471b37871cbc54c9c3fdddfa6fc55901f39256af25117

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks