Resubmissions

31/03/2025, 16:30

250331-tzz2sawmx5 10

14/09/2021, 22:39

210914-2kz28sbddq 10

General

  • Target

    e4a200fc3da152d2b8c48f6e19b8ec97

  • Size

    787KB

  • Sample

    210914-2kz28sbddq

  • MD5

    e4a200fc3da152d2b8c48f6e19b8ec97

  • SHA1

    6104b851cccad3628b12d4ca136b8f364bbd3d35

  • SHA256

    95d29f64d0106c91070bcd511f78f6cf29d35cdb8cbbd97cfdfdcf61e422b4da

  • SHA512

    d704391d9a566a889398af1d119e46aecfa9421802cb14785847a64d4848874f2b65aed132d955f624a848fead5b2cb48a9805c90d5df2e230064775f6f015ea

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

172.31.9.183:29120

Targets

    • Target

      e4a200fc3da152d2b8c48f6e19b8ec97

    • Size

      787KB

    • MD5

      e4a200fc3da152d2b8c48f6e19b8ec97

    • SHA1

      6104b851cccad3628b12d4ca136b8f364bbd3d35

    • SHA256

      95d29f64d0106c91070bcd511f78f6cf29d35cdb8cbbd97cfdfdcf61e422b4da

    • SHA512

      d704391d9a566a889398af1d119e46aecfa9421802cb14785847a64d4848874f2b65aed132d955f624a848fead5b2cb48a9805c90d5df2e230064775f6f015ea

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks