General

  • Target

    c3ac8a47ae6071de90e1b3ab4086bc07594bebe8f697b1a645c127911d63f3c1

  • Size

    336KB

  • Sample

    241105-r2nqesvqgq

  • MD5

    80b6203b1c7ccd2b4d65e2a77473c6cd

  • SHA1

    23fa0f77f6e17322bfaea453e7d0dd4d190ce9d5

  • SHA256

    c3ac8a47ae6071de90e1b3ab4086bc07594bebe8f697b1a645c127911d63f3c1

  • SHA512

    719e243f854c95b6c2113d9e3acccb1fa1a2ad89f9b4277bb3105ab8993c4fb83d50ea2d00e77b26af5e0b9a3d2dcd5c31b984751453c0ed0e228a2003d2040b

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      c3ac8a47ae6071de90e1b3ab4086bc07594bebe8f697b1a645c127911d63f3c1

    • Size

      336KB

    • MD5

      80b6203b1c7ccd2b4d65e2a77473c6cd

    • SHA1

      23fa0f77f6e17322bfaea453e7d0dd4d190ce9d5

    • SHA256

      c3ac8a47ae6071de90e1b3ab4086bc07594bebe8f697b1a645c127911d63f3c1

    • SHA512

      719e243f854c95b6c2113d9e3acccb1fa1a2ad89f9b4277bb3105ab8993c4fb83d50ea2d00e77b26af5e0b9a3d2dcd5c31b984751453c0ed0e228a2003d2040b

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks