General

  • Target

    de79c5437b3dc45ae6a129aa19aa82fd16866a0aafe186c31746b26d0423618c

  • Size

    339KB

  • Sample

    241105-mrd11sskfp

  • MD5

    14bdde3e7fe046d3912299525ed6740b

  • SHA1

    e299ed672a6ec287ec626aea0306340b7be60189

  • SHA256

    de79c5437b3dc45ae6a129aa19aa82fd16866a0aafe186c31746b26d0423618c

  • SHA512

    56a623d1ad74a58166ada3eb89efd187ded48eb75ca64ef335df64e4daa18e97a489faa046a346c079658ca7f6b7bbfcdd3904074ef1b49954a76ecf06ffd277

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      de79c5437b3dc45ae6a129aa19aa82fd16866a0aafe186c31746b26d0423618c

    • Size

      339KB

    • MD5

      14bdde3e7fe046d3912299525ed6740b

    • SHA1

      e299ed672a6ec287ec626aea0306340b7be60189

    • SHA256

      de79c5437b3dc45ae6a129aa19aa82fd16866a0aafe186c31746b26d0423618c

    • SHA512

      56a623d1ad74a58166ada3eb89efd187ded48eb75ca64ef335df64e4daa18e97a489faa046a346c079658ca7f6b7bbfcdd3904074ef1b49954a76ecf06ffd277

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks