General

  • Target

    d98f82c04e82a674c3fe3ed289b29835c81f62e888257874a23d96f6cada4137

  • Size

    338KB

  • Sample

    241105-argexszhpb

  • MD5

    b5ade88ee4f24ff3492017f29a734fe0

  • SHA1

    cfb73054ba4d68ec2fc1f88237605fa0c747d085

  • SHA256

    d98f82c04e82a674c3fe3ed289b29835c81f62e888257874a23d96f6cada4137

  • SHA512

    e3c3cb641dd21b3f55c5889871fd7a92b4aa3db053ed788c7f7f9aef6c2154b024cd6258b3919a0014e7f7f1f68b2ceaafb115c6af5cce3a0c0f71957b582e42

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      d98f82c04e82a674c3fe3ed289b29835c81f62e888257874a23d96f6cada4137

    • Size

      338KB

    • MD5

      b5ade88ee4f24ff3492017f29a734fe0

    • SHA1

      cfb73054ba4d68ec2fc1f88237605fa0c747d085

    • SHA256

      d98f82c04e82a674c3fe3ed289b29835c81f62e888257874a23d96f6cada4137

    • SHA512

      e3c3cb641dd21b3f55c5889871fd7a92b4aa3db053ed788c7f7f9aef6c2154b024cd6258b3919a0014e7f7f1f68b2ceaafb115c6af5cce3a0c0f71957b582e42

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks