General

  • Target

    b767b6f1dfd939092403580fe383ea8f443f37f95c43112635c881b093379580

  • Size

    339KB

  • Sample

    241105-bhzetazrhs

  • MD5

    91e0ea9f72c4e37f2517667d73981f94

  • SHA1

    04bc89f67446ab356d17f2cf898e1570b8f322a5

  • SHA256

    b767b6f1dfd939092403580fe383ea8f443f37f95c43112635c881b093379580

  • SHA512

    5c8429510dc5220d0da5073c91399d4fdfb2fb5869a45e273e0749cde145e5229480f05c5be89f6e9802cda1c41f452e1714d2bc04b460be2fbf852638ba8570

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      b767b6f1dfd939092403580fe383ea8f443f37f95c43112635c881b093379580

    • Size

      339KB

    • MD5

      91e0ea9f72c4e37f2517667d73981f94

    • SHA1

      04bc89f67446ab356d17f2cf898e1570b8f322a5

    • SHA256

      b767b6f1dfd939092403580fe383ea8f443f37f95c43112635c881b093379580

    • SHA512

      5c8429510dc5220d0da5073c91399d4fdfb2fb5869a45e273e0749cde145e5229480f05c5be89f6e9802cda1c41f452e1714d2bc04b460be2fbf852638ba8570

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks