General

  • Target

    679777ec6e3bdba39846c479a566924ebf7bfe236c6a41bdb9758f144d397195

  • Size

    337KB

  • Sample

    241110-fclc8azgle

  • MD5

    e5915ad8fd90738d4cf9f7439dddcef3

  • SHA1

    44afde66eea90e3edb3cdf6fb1cdbf0ea6337cb8

  • SHA256

    679777ec6e3bdba39846c479a566924ebf7bfe236c6a41bdb9758f144d397195

  • SHA512

    1d6b5a1d2a3ae67377c640aa7520c8536ecbf421caff8d703f5308f53dc6ee144db44a5d90700ec85a40214720cc8ffbfce76ea7255b02d58df095b9ed6d0fe9

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      679777ec6e3bdba39846c479a566924ebf7bfe236c6a41bdb9758f144d397195

    • Size

      337KB

    • MD5

      e5915ad8fd90738d4cf9f7439dddcef3

    • SHA1

      44afde66eea90e3edb3cdf6fb1cdbf0ea6337cb8

    • SHA256

      679777ec6e3bdba39846c479a566924ebf7bfe236c6a41bdb9758f144d397195

    • SHA512

      1d6b5a1d2a3ae67377c640aa7520c8536ecbf421caff8d703f5308f53dc6ee144db44a5d90700ec85a40214720cc8ffbfce76ea7255b02d58df095b9ed6d0fe9

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks