General

  • Target

    2ff9c8123042f6f0309da15fe1494e4089583b843f0c0f2271b5dbe2a86e0cd0

  • Size

    339KB

  • Sample

    241105-snbpdatbnb

  • MD5

    8610a0952e72a156a8d2de63f0022153

  • SHA1

    2b04f688d5b2993bc49817f538fcc7037e82dea7

  • SHA256

    2ff9c8123042f6f0309da15fe1494e4089583b843f0c0f2271b5dbe2a86e0cd0

  • SHA512

    ab422a75cecca06990e3c80645c4880ccee9e2a8b5ff204dcff9337120a27b9697f306f1652fb3f5c95f6b058b271f7325a38bbe08a632da4ab91fc1dca6b180

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      2ff9c8123042f6f0309da15fe1494e4089583b843f0c0f2271b5dbe2a86e0cd0

    • Size

      339KB

    • MD5

      8610a0952e72a156a8d2de63f0022153

    • SHA1

      2b04f688d5b2993bc49817f538fcc7037e82dea7

    • SHA256

      2ff9c8123042f6f0309da15fe1494e4089583b843f0c0f2271b5dbe2a86e0cd0

    • SHA512

      ab422a75cecca06990e3c80645c4880ccee9e2a8b5ff204dcff9337120a27b9697f306f1652fb3f5c95f6b058b271f7325a38bbe08a632da4ab91fc1dca6b180

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks