General

  • Target

    bb5473952394caf607963674786bfdc3c2e9bd2e8bdfcf9e80e5f86de842a2a6

  • Size

    340KB

  • Sample

    241106-2sa33szfkp

  • MD5

    e22559dffbc8f78a7e8c743527ed89f3

  • SHA1

    9452d180d521282f354f9698a5a2b58ee4a08110

  • SHA256

    bb5473952394caf607963674786bfdc3c2e9bd2e8bdfcf9e80e5f86de842a2a6

  • SHA512

    ff8caf19f99b4c543898b8b250175cbc906f7605e7d3dd963d9d8c8b505f8cfe9bec627826d0e2ea30968440b3324b2f3eba5e2739ae64309d0d70f452ad539e

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      bb5473952394caf607963674786bfdc3c2e9bd2e8bdfcf9e80e5f86de842a2a6

    • Size

      340KB

    • MD5

      e22559dffbc8f78a7e8c743527ed89f3

    • SHA1

      9452d180d521282f354f9698a5a2b58ee4a08110

    • SHA256

      bb5473952394caf607963674786bfdc3c2e9bd2e8bdfcf9e80e5f86de842a2a6

    • SHA512

      ff8caf19f99b4c543898b8b250175cbc906f7605e7d3dd963d9d8c8b505f8cfe9bec627826d0e2ea30968440b3324b2f3eba5e2739ae64309d0d70f452ad539e

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks