General

  • Target

    ff8d1bff3caed34bb108a2ca3120e490be6384fa3c5bbbb7d0af47cca0fc58da

  • Size

    340KB

  • Sample

    241105-3rekjssaqm

  • MD5

    09a274e40bd6c48459b1dd9201d73a6b

  • SHA1

    a63a27055da09ab38e84b9926e6e4bb7b9b71b6d

  • SHA256

    ff8d1bff3caed34bb108a2ca3120e490be6384fa3c5bbbb7d0af47cca0fc58da

  • SHA512

    ec37f569269426e16b224264508f73b95267bf52d2dac78b3a5fbe168bfaab6ad15c2b75725d32562b439f931c1b47eb277d0b355f90ddd78f4ac504019eafc9

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      ff8d1bff3caed34bb108a2ca3120e490be6384fa3c5bbbb7d0af47cca0fc58da

    • Size

      340KB

    • MD5

      09a274e40bd6c48459b1dd9201d73a6b

    • SHA1

      a63a27055da09ab38e84b9926e6e4bb7b9b71b6d

    • SHA256

      ff8d1bff3caed34bb108a2ca3120e490be6384fa3c5bbbb7d0af47cca0fc58da

    • SHA512

      ec37f569269426e16b224264508f73b95267bf52d2dac78b3a5fbe168bfaab6ad15c2b75725d32562b439f931c1b47eb277d0b355f90ddd78f4ac504019eafc9

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks