General

  • Target

    c2f09b34ab2f7b483c640754bd8e1f5867902e241f3b076addcbb8ef68ddddbc

  • Size

    337KB

  • Sample

    241110-v1l2zs1hpe

  • MD5

    80b41e168231f9ca5196f3299a3be876

  • SHA1

    bbd38083eb94cee2065a084f43b0e6cf87470965

  • SHA256

    c2f09b34ab2f7b483c640754bd8e1f5867902e241f3b076addcbb8ef68ddddbc

  • SHA512

    924d2a4f4e0344e7663e8b6d5d416874027dd036fd0f6c43022e31a08a83a4e9a566f60048d196098654a02f160ace8f0dddb27a9a3d2546d565b8a799c6cf70

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      c2f09b34ab2f7b483c640754bd8e1f5867902e241f3b076addcbb8ef68ddddbc

    • Size

      337KB

    • MD5

      80b41e168231f9ca5196f3299a3be876

    • SHA1

      bbd38083eb94cee2065a084f43b0e6cf87470965

    • SHA256

      c2f09b34ab2f7b483c640754bd8e1f5867902e241f3b076addcbb8ef68ddddbc

    • SHA512

      924d2a4f4e0344e7663e8b6d5d416874027dd036fd0f6c43022e31a08a83a4e9a566f60048d196098654a02f160ace8f0dddb27a9a3d2546d565b8a799c6cf70

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks