General

  • Target

    01c1b5a7e6d70f0c8fb1e39d1ffed4a9e3989bbe46014ebd3562eab1fdaf7f18

  • Size

    340KB

  • Sample

    241111-ls824swrby

  • MD5

    fbdbf53f782660a0e15e6bfa425ff8da

  • SHA1

    38e69cae8a5f3201694cb0d7c691273a2040dd89

  • SHA256

    01c1b5a7e6d70f0c8fb1e39d1ffed4a9e3989bbe46014ebd3562eab1fdaf7f18

  • SHA512

    399f3a300af8475710a218f1697e1531ce4206e8f1b891c05d18a61f85e0e47400009ce7a2384898094f3a90410c996862e5642b057dac7660039ebf7af0fd5a

  • SSDEEP

    6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

Malware Config

Extracted

Family

redline

Botnet

24.01

C2

37.220.86.164:29170

Attributes
  • auth_value

    1c7f0aa21138601b5201a3a4a0123991

Targets

    • Target

      01c1b5a7e6d70f0c8fb1e39d1ffed4a9e3989bbe46014ebd3562eab1fdaf7f18

    • Size

      340KB

    • MD5

      fbdbf53f782660a0e15e6bfa425ff8da

    • SHA1

      38e69cae8a5f3201694cb0d7c691273a2040dd89

    • SHA256

      01c1b5a7e6d70f0c8fb1e39d1ffed4a9e3989bbe46014ebd3562eab1fdaf7f18

    • SHA512

      399f3a300af8475710a218f1697e1531ce4206e8f1b891c05d18a61f85e0e47400009ce7a2384898094f3a90410c996862e5642b057dac7660039ebf7af0fd5a

    • SSDEEP

      6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks