General

  • Target

    340677c79445b33ea84861be7d08afcc1af895c28a418495b7245df00beeb461

  • Size

    339KB

  • Sample

    241111-kbge4avrcz

  • MD5

    2997c5a94b267e52585ac24145f5d9fe

  • SHA1

    d428c5b089677bd5c58567a0b013b4b0dfd57ea6

  • SHA256

    340677c79445b33ea84861be7d08afcc1af895c28a418495b7245df00beeb461

  • SHA512

    12131ccad667c7425d7e58508111e76ac28dfe6b2786b14e31c297d89087f82c4701cb7ea0c8626921ab246d1d3e517bee3281fe329b9a4f73bebb9e78a3048d

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      340677c79445b33ea84861be7d08afcc1af895c28a418495b7245df00beeb461

    • Size

      339KB

    • MD5

      2997c5a94b267e52585ac24145f5d9fe

    • SHA1

      d428c5b089677bd5c58567a0b013b4b0dfd57ea6

    • SHA256

      340677c79445b33ea84861be7d08afcc1af895c28a418495b7245df00beeb461

    • SHA512

      12131ccad667c7425d7e58508111e76ac28dfe6b2786b14e31c297d89087f82c4701cb7ea0c8626921ab246d1d3e517bee3281fe329b9a4f73bebb9e78a3048d

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks