General

  • Target

    25eb6991237f5cea2fa6dc0446545aa22d6bbba5fac1c5923b968fbbcb687eff

  • Size

    337KB

  • Sample

    241111-ksazmszpgm

  • MD5

    d5e74416ed4680624ba0093f16323616

  • SHA1

    5b8f481a4697b1ca38b01926a5f57bbb3c2d9fd1

  • SHA256

    25eb6991237f5cea2fa6dc0446545aa22d6bbba5fac1c5923b968fbbcb687eff

  • SHA512

    d778ee2e78b063f33df719bf5ec650de4163e9dae98957771b61a5c5fdf1a9cdf0bd0ad93966f075699f127d96619c7de587690766087981a071e6a07325cc46

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      25eb6991237f5cea2fa6dc0446545aa22d6bbba5fac1c5923b968fbbcb687eff

    • Size

      337KB

    • MD5

      d5e74416ed4680624ba0093f16323616

    • SHA1

      5b8f481a4697b1ca38b01926a5f57bbb3c2d9fd1

    • SHA256

      25eb6991237f5cea2fa6dc0446545aa22d6bbba5fac1c5923b968fbbcb687eff

    • SHA512

      d778ee2e78b063f33df719bf5ec650de4163e9dae98957771b61a5c5fdf1a9cdf0bd0ad93966f075699f127d96619c7de587690766087981a071e6a07325cc46

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks