General

  • Target

    bae52f7759a60c7515454f510876cbc81121325aab29de58588afb0c64420261

  • Size

    340KB

  • Sample

    241105-q27ymavkfq

  • MD5

    df4618d5cb5da76a544425b4d5352bb1

  • SHA1

    15b21e1ddbc1a3e1723c39ae97f061dd1b67d8fc

  • SHA256

    bae52f7759a60c7515454f510876cbc81121325aab29de58588afb0c64420261

  • SHA512

    357e9be692b1392ff93e58b402b08f33650df35266e22efb20df0256dba4803a7b960c21672deab4bc0ed7f16b9cfe46e7f17e347152931e55be55b3670ee87a

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      bae52f7759a60c7515454f510876cbc81121325aab29de58588afb0c64420261

    • Size

      340KB

    • MD5

      df4618d5cb5da76a544425b4d5352bb1

    • SHA1

      15b21e1ddbc1a3e1723c39ae97f061dd1b67d8fc

    • SHA256

      bae52f7759a60c7515454f510876cbc81121325aab29de58588afb0c64420261

    • SHA512

      357e9be692b1392ff93e58b402b08f33650df35266e22efb20df0256dba4803a7b960c21672deab4bc0ed7f16b9cfe46e7f17e347152931e55be55b3670ee87a

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks