General

  • Target

    c047ad853d3d28dfe6a9de2e828a0c7d6392af9ae718f8d646609ff3b60a4af4

  • Size

    338KB

  • Sample

    241110-kmcahstbrp

  • MD5

    70b819c8701a063db108063c2f757a76

  • SHA1

    7cbb30b274b76a3f401393e53149bb71a4ec8b6f

  • SHA256

    c047ad853d3d28dfe6a9de2e828a0c7d6392af9ae718f8d646609ff3b60a4af4

  • SHA512

    cb5f2ba5041266f531581684f0a8eafc861ddc8629c15ae06c4896942a694d924f6d25fee66eb9b8c709082780bab7ec7dd6f1127540fc71f96d7813dc7e03f9

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      c047ad853d3d28dfe6a9de2e828a0c7d6392af9ae718f8d646609ff3b60a4af4

    • Size

      338KB

    • MD5

      70b819c8701a063db108063c2f757a76

    • SHA1

      7cbb30b274b76a3f401393e53149bb71a4ec8b6f

    • SHA256

      c047ad853d3d28dfe6a9de2e828a0c7d6392af9ae718f8d646609ff3b60a4af4

    • SHA512

      cb5f2ba5041266f531581684f0a8eafc861ddc8629c15ae06c4896942a694d924f6d25fee66eb9b8c709082780bab7ec7dd6f1127540fc71f96d7813dc7e03f9

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks