General

  • Target

    799c920f16162f9c0e7271e239d37ec8116a5c21cfab73bbd56e9343ae05f0b6

  • Size

    337KB

  • Sample

    241107-swnznstqgy

  • MD5

    ef269f94f292bf5b75208eeaaa2cf3a5

  • SHA1

    da88c549827a6adc9ec577009082c0483fc9569c

  • SHA256

    799c920f16162f9c0e7271e239d37ec8116a5c21cfab73bbd56e9343ae05f0b6

  • SHA512

    591e45af41fd14cd1a7453e163a62ea72d83a9959c2a90899b3a47acc0a3de82eba9ccb555d8ba97e36f4688f9a0c83eaa1d9d87ba00ba04ff32cdbbea3eccbe

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      799c920f16162f9c0e7271e239d37ec8116a5c21cfab73bbd56e9343ae05f0b6

    • Size

      337KB

    • MD5

      ef269f94f292bf5b75208eeaaa2cf3a5

    • SHA1

      da88c549827a6adc9ec577009082c0483fc9569c

    • SHA256

      799c920f16162f9c0e7271e239d37ec8116a5c21cfab73bbd56e9343ae05f0b6

    • SHA512

      591e45af41fd14cd1a7453e163a62ea72d83a9959c2a90899b3a47acc0a3de82eba9ccb555d8ba97e36f4688f9a0c83eaa1d9d87ba00ba04ff32cdbbea3eccbe

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks