General

  • Target

    SecuriteInfo.com.Trojan.GenericKD.37018260.17870.25484

  • Size

    421KB

  • Sample

    210603-hstm82pycs

  • MD5

    6972482b38fda49d5ea9f11bd2496909

  • SHA1

    3f70b20432fa4ceb9cff4c3bd28028183d7e6fa3

  • SHA256

    69e411368f9407c3c25b453792bd383fed96eb6bb6a7e9d0cf06d980add295c6

  • SHA512

    364238d4e97a6811f3fa3942ce528e4fd0a0666539d881d43c7e37428dbe6a05c1fc018e873ba3d02fe0bfee6522013f361fd8c8962dad99ef4734207b71079e

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

new

C2

45.134.225.35:7821

Targets

    • Target

      SecuriteInfo.com.Trojan.GenericKD.37018260.17870.25484

    • Size

      421KB

    • MD5

      6972482b38fda49d5ea9f11bd2496909

    • SHA1

      3f70b20432fa4ceb9cff4c3bd28028183d7e6fa3

    • SHA256

      69e411368f9407c3c25b453792bd383fed96eb6bb6a7e9d0cf06d980add295c6

    • SHA512

      364238d4e97a6811f3fa3942ce528e4fd0a0666539d881d43c7e37428dbe6a05c1fc018e873ba3d02fe0bfee6522013f361fd8c8962dad99ef4734207b71079e

    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks