General

  • Target

    b581cd085d9b835a70ab837fb513ad3b5eb679797e79fcc0c1bbe5dc9e520a49

  • Size

    340KB

  • Sample

    241111-ayhlkaxqes

  • MD5

    21ce9a3c2781adcdd3a111a70f5f2c03

  • SHA1

    d18cc5f4c4d78b2030b6ab2038a3d1e994d45010

  • SHA256

    b581cd085d9b835a70ab837fb513ad3b5eb679797e79fcc0c1bbe5dc9e520a49

  • SHA512

    b08a58f6e41c70f73d7b55301f50e81f0f09a68befdaaddad6c8125d01e7088f5500ca783b768a531fc457abf7add10da63b69bac1fe68d0324151c061b11b5e

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      b581cd085d9b835a70ab837fb513ad3b5eb679797e79fcc0c1bbe5dc9e520a49

    • Size

      340KB

    • MD5

      21ce9a3c2781adcdd3a111a70f5f2c03

    • SHA1

      d18cc5f4c4d78b2030b6ab2038a3d1e994d45010

    • SHA256

      b581cd085d9b835a70ab837fb513ad3b5eb679797e79fcc0c1bbe5dc9e520a49

    • SHA512

      b08a58f6e41c70f73d7b55301f50e81f0f09a68befdaaddad6c8125d01e7088f5500ca783b768a531fc457abf7add10da63b69bac1fe68d0324151c061b11b5e

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks