General

  • Target

    861ede1a210df0d897e0bec72db95ddfba865e0f49fc2881a595299f99f7a3fb

  • Size

    336KB

  • Sample

    241110-jcq59avrcr

  • MD5

    8ff073ce6867ea60d975dd22cc8c2726

  • SHA1

    830cc6043a5deadc48dd76fc41d5a050dca02177

  • SHA256

    861ede1a210df0d897e0bec72db95ddfba865e0f49fc2881a595299f99f7a3fb

  • SHA512

    b38da917e7f68c6cfba01023ded8652f8b0aa67c898cb1e530624fb042cdeb47818684b34e25863083a20cb7ddb66148787428afa904927b8e030b62bcf021a1

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      861ede1a210df0d897e0bec72db95ddfba865e0f49fc2881a595299f99f7a3fb

    • Size

      336KB

    • MD5

      8ff073ce6867ea60d975dd22cc8c2726

    • SHA1

      830cc6043a5deadc48dd76fc41d5a050dca02177

    • SHA256

      861ede1a210df0d897e0bec72db95ddfba865e0f49fc2881a595299f99f7a3fb

    • SHA512

      b38da917e7f68c6cfba01023ded8652f8b0aa67c898cb1e530624fb042cdeb47818684b34e25863083a20cb7ddb66148787428afa904927b8e030b62bcf021a1

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks