General

  • Target

    4b84a46c2259bd518e8123c5ab3552feec911dc541fc703231ac60d0f5807d02

  • Size

    339KB

  • Sample

    241110-wpn8mssaln

  • MD5

    14c0e9a6dca4a31ac140da1aa268bdaf

  • SHA1

    edad3e6e5944268ecf4ab9c976c6407c4b89b65c

  • SHA256

    4b84a46c2259bd518e8123c5ab3552feec911dc541fc703231ac60d0f5807d02

  • SHA512

    e0e46ad33a70f613a7a11b99db9d6e11b91071b270818b95520fe9c4c1d07f647985a19c00e7c621644577abccc5296521df1bb146a4a2bf3c3964499a35b297

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      4b84a46c2259bd518e8123c5ab3552feec911dc541fc703231ac60d0f5807d02

    • Size

      339KB

    • MD5

      14c0e9a6dca4a31ac140da1aa268bdaf

    • SHA1

      edad3e6e5944268ecf4ab9c976c6407c4b89b65c

    • SHA256

      4b84a46c2259bd518e8123c5ab3552feec911dc541fc703231ac60d0f5807d02

    • SHA512

      e0e46ad33a70f613a7a11b99db9d6e11b91071b270818b95520fe9c4c1d07f647985a19c00e7c621644577abccc5296521df1bb146a4a2bf3c3964499a35b297

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks