General

  • Target

    23c93ec3d8ce09f3fd5731a78a19ea4f5285eeb09bfbb90952b45608f997a4b4

  • Size

    336KB

  • Sample

    241110-jk1dwswjej

  • MD5

    27e6b3f59e52c1bb33edfd37a5103bf2

  • SHA1

    155acaa26e5dcfd73a5c58ea3d5ae1b557e8dc95

  • SHA256

    23c93ec3d8ce09f3fd5731a78a19ea4f5285eeb09bfbb90952b45608f997a4b4

  • SHA512

    009db76d4477a45d192c5c7659c855e8589d7f239f36884b3165683120c8d0f64d3c8a50173bf1ceb9ef5a52cdcdee888c323ee3d0437fdf6b984e4414159f86

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      23c93ec3d8ce09f3fd5731a78a19ea4f5285eeb09bfbb90952b45608f997a4b4

    • Size

      336KB

    • MD5

      27e6b3f59e52c1bb33edfd37a5103bf2

    • SHA1

      155acaa26e5dcfd73a5c58ea3d5ae1b557e8dc95

    • SHA256

      23c93ec3d8ce09f3fd5731a78a19ea4f5285eeb09bfbb90952b45608f997a4b4

    • SHA512

      009db76d4477a45d192c5c7659c855e8589d7f239f36884b3165683120c8d0f64d3c8a50173bf1ceb9ef5a52cdcdee888c323ee3d0437fdf6b984e4414159f86

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks