General

  • Target

    70b070174d3209cd1b1132b69f160e58177850dad19031106477eb36af42e07c

  • Size

    340KB

  • Sample

    241107-djeg5stgmf

  • MD5

    cf86d323126b22b97116947ee491fa5d

  • SHA1

    f7bd311fa17a0e4898b7640c8b33561e74063852

  • SHA256

    70b070174d3209cd1b1132b69f160e58177850dad19031106477eb36af42e07c

  • SHA512

    e40e3bf5f14fa5344aade813bb9d7321645bde413979164f3c3f040ea3086f9969a789b9080f33de76d80bcba89340d15e798a54a37e21d524d77f6f4a86bb27

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      70b070174d3209cd1b1132b69f160e58177850dad19031106477eb36af42e07c

    • Size

      340KB

    • MD5

      cf86d323126b22b97116947ee491fa5d

    • SHA1

      f7bd311fa17a0e4898b7640c8b33561e74063852

    • SHA256

      70b070174d3209cd1b1132b69f160e58177850dad19031106477eb36af42e07c

    • SHA512

      e40e3bf5f14fa5344aade813bb9d7321645bde413979164f3c3f040ea3086f9969a789b9080f33de76d80bcba89340d15e798a54a37e21d524d77f6f4a86bb27

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks