General

  • Target

    50db4947eebc6cb29f193fa9b550eb0c478caa4c37527aa0ce3cf6f588714531

  • Size

    340KB

  • Sample

    241110-g12ksa1gma

  • MD5

    6e2e54de65a9ccd2282647739cb5d789

  • SHA1

    d02d7317ec3c58a8934ea2ae7caa6d4b1e2d5044

  • SHA256

    50db4947eebc6cb29f193fa9b550eb0c478caa4c37527aa0ce3cf6f588714531

  • SHA512

    90591e2829ffd10ba06e95bebf275cba355943b168fe3f3c1391ec0a94db87a8a3e38536c721a3095a4c28da9d63c2b45a9d312dd676a83b1f389ed487c04683

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      50db4947eebc6cb29f193fa9b550eb0c478caa4c37527aa0ce3cf6f588714531

    • Size

      340KB

    • MD5

      6e2e54de65a9ccd2282647739cb5d789

    • SHA1

      d02d7317ec3c58a8934ea2ae7caa6d4b1e2d5044

    • SHA256

      50db4947eebc6cb29f193fa9b550eb0c478caa4c37527aa0ce3cf6f588714531

    • SHA512

      90591e2829ffd10ba06e95bebf275cba355943b168fe3f3c1391ec0a94db87a8a3e38536c721a3095a4c28da9d63c2b45a9d312dd676a83b1f389ed487c04683

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks