General

  • Target

    1873bdef632a10f7a8c5ac767f62e9119ca4860b6171edfc1e3daa0872d3659e

  • Size

    337KB

  • Sample

    241110-bft3bawelb

  • MD5

    6305a0698f5bdcf9489588eda7747e67

  • SHA1

    022f399d67df11c2f31bfddefda1bfd56a524409

  • SHA256

    1873bdef632a10f7a8c5ac767f62e9119ca4860b6171edfc1e3daa0872d3659e

  • SHA512

    dd3be30ef7542f58a59ffc2b25c34d0a7aebfc57b4cede6682c9fa5ab45bd64fe3b48d6fcc4b6682abd21561a28848a7da611e2824ed4fd9a223fcb67dbc3ea9

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      1873bdef632a10f7a8c5ac767f62e9119ca4860b6171edfc1e3daa0872d3659e

    • Size

      337KB

    • MD5

      6305a0698f5bdcf9489588eda7747e67

    • SHA1

      022f399d67df11c2f31bfddefda1bfd56a524409

    • SHA256

      1873bdef632a10f7a8c5ac767f62e9119ca4860b6171edfc1e3daa0872d3659e

    • SHA512

      dd3be30ef7542f58a59ffc2b25c34d0a7aebfc57b4cede6682c9fa5ab45bd64fe3b48d6fcc4b6682abd21561a28848a7da611e2824ed4fd9a223fcb67dbc3ea9

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks