General

  • Target

    0afc167974a0a4b45b142cd05f463e4fd09482fa0115cd98186f2840e9e3367a

  • Size

    336KB

  • Sample

    241110-hq83js1nes

  • MD5

    7d069f3f435a295b61cb74b21e506b70

  • SHA1

    86b7c0ae8073bd7e1985b566db991f8e857f6a36

  • SHA256

    0afc167974a0a4b45b142cd05f463e4fd09482fa0115cd98186f2840e9e3367a

  • SHA512

    f63caeba7a8b234dbbab3b00aec34e55f02ae508c401cc66677389922e438aaa76c91ec0c05fc484d06101af8bc2995be1d0aad64d448e2261b75761859088d6

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      0afc167974a0a4b45b142cd05f463e4fd09482fa0115cd98186f2840e9e3367a

    • Size

      336KB

    • MD5

      7d069f3f435a295b61cb74b21e506b70

    • SHA1

      86b7c0ae8073bd7e1985b566db991f8e857f6a36

    • SHA256

      0afc167974a0a4b45b142cd05f463e4fd09482fa0115cd98186f2840e9e3367a

    • SHA512

      f63caeba7a8b234dbbab3b00aec34e55f02ae508c401cc66677389922e438aaa76c91ec0c05fc484d06101af8bc2995be1d0aad64d448e2261b75761859088d6

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks