General

  • Target

    95543f771c833ca76d462313cc555f7be129ca86ca25b910d74391faa801d33e

  • Size

    340KB

  • Sample

    241111-kt32tazqap

  • MD5

    cb83573844740ae836b73acb53a1a0b6

  • SHA1

    7563ca9f4bd36dd9e7442d00268091cdf62264a0

  • SHA256

    95543f771c833ca76d462313cc555f7be129ca86ca25b910d74391faa801d33e

  • SHA512

    ae579235c664fad7854ef88f00b54cd8b191f14237745f924c2d5896822924bd324640fb6c4d80016defa4eacd235c8ec5c6805ed6d2b0afdd9bcbb5ed788758

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      95543f771c833ca76d462313cc555f7be129ca86ca25b910d74391faa801d33e

    • Size

      340KB

    • MD5

      cb83573844740ae836b73acb53a1a0b6

    • SHA1

      7563ca9f4bd36dd9e7442d00268091cdf62264a0

    • SHA256

      95543f771c833ca76d462313cc555f7be129ca86ca25b910d74391faa801d33e

    • SHA512

      ae579235c664fad7854ef88f00b54cd8b191f14237745f924c2d5896822924bd324640fb6c4d80016defa4eacd235c8ec5c6805ed6d2b0afdd9bcbb5ed788758

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks