General

  • Target

    02bf3ac5590459faae8ae8db560855881cc07f28eb79680ce15f337a5fdaa1d6

  • Size

    340KB

  • Sample

    241110-rlq6ls1qcq

  • MD5

    f548dde71a60e00fc1934794aca03d1c

  • SHA1

    05a8562433a9a84697e1e9e758f45248ca9a6467

  • SHA256

    02bf3ac5590459faae8ae8db560855881cc07f28eb79680ce15f337a5fdaa1d6

  • SHA512

    6f6a345bf280693d5424cd134969a4d33d80de396c1dbc1301f70333db944a9150e86d375fa596692348fab2d837085a8814e4b26e95adbb8c4373151e9d3971

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      02bf3ac5590459faae8ae8db560855881cc07f28eb79680ce15f337a5fdaa1d6

    • Size

      340KB

    • MD5

      f548dde71a60e00fc1934794aca03d1c

    • SHA1

      05a8562433a9a84697e1e9e758f45248ca9a6467

    • SHA256

      02bf3ac5590459faae8ae8db560855881cc07f28eb79680ce15f337a5fdaa1d6

    • SHA512

      6f6a345bf280693d5424cd134969a4d33d80de396c1dbc1301f70333db944a9150e86d375fa596692348fab2d837085a8814e4b26e95adbb8c4373151e9d3971

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks