General

  • Target

    787d3ab02d0be5fc416d86f6311f89f1399f65c66b24501afa31913af8e1f030

  • Size

    338KB

  • Sample

    241110-rqx5qayenh

  • MD5

    02c7a49efb34da0066a0adf673c01657

  • SHA1

    15c25e3f653fdc9f4a688c0238f2b9371f380765

  • SHA256

    787d3ab02d0be5fc416d86f6311f89f1399f65c66b24501afa31913af8e1f030

  • SHA512

    0af3f3f714d3bda714d97072c11251e381742e5faa45e894d3eb64f8f7947fa3e797995cfb7f8a7cbb8276057f4327de32e65d8aa1b989b6c1271a60a4e6f517

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      787d3ab02d0be5fc416d86f6311f89f1399f65c66b24501afa31913af8e1f030

    • Size

      338KB

    • MD5

      02c7a49efb34da0066a0adf673c01657

    • SHA1

      15c25e3f653fdc9f4a688c0238f2b9371f380765

    • SHA256

      787d3ab02d0be5fc416d86f6311f89f1399f65c66b24501afa31913af8e1f030

    • SHA512

      0af3f3f714d3bda714d97072c11251e381742e5faa45e894d3eb64f8f7947fa3e797995cfb7f8a7cbb8276057f4327de32e65d8aa1b989b6c1271a60a4e6f517

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks