General

  • Target

    740224dff178c375fae7f714fa57906b09b4d7040e429ef33561fef028445595

  • Size

    340KB

  • Sample

    241105-qsrkaavjaq

  • MD5

    10cdbbadf0e74d663f1509fbbf852322

  • SHA1

    0fea469b96f70c78c22033a1c943f48190e1cf19

  • SHA256

    740224dff178c375fae7f714fa57906b09b4d7040e429ef33561fef028445595

  • SHA512

    5d4d75415d6ac1e9ef53aba7a4f0243e5f4130e11171e544bd82ba3d69cfe5cd8fe10043c55b4ff23a44908c80e176f81e1535c7d2fc933c38eafe039f6d1d0f

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      740224dff178c375fae7f714fa57906b09b4d7040e429ef33561fef028445595

    • Size

      340KB

    • MD5

      10cdbbadf0e74d663f1509fbbf852322

    • SHA1

      0fea469b96f70c78c22033a1c943f48190e1cf19

    • SHA256

      740224dff178c375fae7f714fa57906b09b4d7040e429ef33561fef028445595

    • SHA512

      5d4d75415d6ac1e9ef53aba7a4f0243e5f4130e11171e544bd82ba3d69cfe5cd8fe10043c55b4ff23a44908c80e176f81e1535c7d2fc933c38eafe039f6d1d0f

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks