General

  • Target

    ec0e28c492856be40cf01a59f1b36dd877fa0dc9647253034a971dd2ca6318b1

  • Size

    336KB

  • Sample

    241105-17xpyszhqp

  • MD5

    deb1251f541c5df961c7da512813bb8f

  • SHA1

    aee98d32681409cf4032ec0d7d1e811d811c321a

  • SHA256

    ec0e28c492856be40cf01a59f1b36dd877fa0dc9647253034a971dd2ca6318b1

  • SHA512

    8dfe40271e1fb8f8db1fe44b086725e3249cd1bdff880e08f6281e8c2d92d9e988354f3e68d45a62b64079ab6af977e08875834ae0eda0294466a6cb5751c737

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      ec0e28c492856be40cf01a59f1b36dd877fa0dc9647253034a971dd2ca6318b1

    • Size

      336KB

    • MD5

      deb1251f541c5df961c7da512813bb8f

    • SHA1

      aee98d32681409cf4032ec0d7d1e811d811c321a

    • SHA256

      ec0e28c492856be40cf01a59f1b36dd877fa0dc9647253034a971dd2ca6318b1

    • SHA512

      8dfe40271e1fb8f8db1fe44b086725e3249cd1bdff880e08f6281e8c2d92d9e988354f3e68d45a62b64079ab6af977e08875834ae0eda0294466a6cb5751c737

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks