General

  • Target

    4dde63e51cd72102e5df0c9b3a5b240222047cd8309de07e18c1397ba4c97241

  • Size

    339KB

  • Sample

    241106-3s4wts1dpn

  • MD5

    9b2f7c79c9ffa1f07f05e72843817961

  • SHA1

    83dcf4a20622dcc337348f8671a15ff0e38e86d7

  • SHA256

    4dde63e51cd72102e5df0c9b3a5b240222047cd8309de07e18c1397ba4c97241

  • SHA512

    7d597adac8de4f68b6de7406ab277d893d9b9941b1e9ea12247c774ab1c9d84fb0de5bb19810c5775e7d229f3caedfb001ac27332ff91a94d7333ba57a061e23

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      4dde63e51cd72102e5df0c9b3a5b240222047cd8309de07e18c1397ba4c97241

    • Size

      339KB

    • MD5

      9b2f7c79c9ffa1f07f05e72843817961

    • SHA1

      83dcf4a20622dcc337348f8671a15ff0e38e86d7

    • SHA256

      4dde63e51cd72102e5df0c9b3a5b240222047cd8309de07e18c1397ba4c97241

    • SHA512

      7d597adac8de4f68b6de7406ab277d893d9b9941b1e9ea12247c774ab1c9d84fb0de5bb19810c5775e7d229f3caedfb001ac27332ff91a94d7333ba57a061e23

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks