General

  • Target

    Solid Hack by Martin.exe

  • Size

    1.2MB

  • Sample

    220911-hglkwsehbm

  • MD5

    82429de4225c154d2ea543b3c2422602

  • SHA1

    d10b5b5276a66c4400300780460432f5f58415ed

  • SHA256

    18aa9172b642b6f597a1a6c42ba96ce25b095fd897fd3e7f9137c5807d5299f3

  • SHA512

    c0d24c7b2f20d31583f5cbe94751681cee217a7daff528789c8dbd1b2e9e0749d36b2b45ecb313604f009a947b9f02c7aeab6b1b2cb6961bedb53c37b1a43ae4

  • SSDEEP

    24576:IrAVlHBNAS0YKYMpI7Q7XIMFedhr2DjfsJQw9TAPFN:IrAV1rAcufs5Ad

Malware Config

Extracted

Family

redline

C2

185.106.92.8:38644

Attributes
  • auth_value

    cde836c032395a20e781dd6629e44f53

Targets

    • Target

      Solid Hack by Martin.exe

    • Size

      1.2MB

    • MD5

      82429de4225c154d2ea543b3c2422602

    • SHA1

      d10b5b5276a66c4400300780460432f5f58415ed

    • SHA256

      18aa9172b642b6f597a1a6c42ba96ce25b095fd897fd3e7f9137c5807d5299f3

    • SHA512

      c0d24c7b2f20d31583f5cbe94751681cee217a7daff528789c8dbd1b2e9e0749d36b2b45ecb313604f009a947b9f02c7aeab6b1b2cb6961bedb53c37b1a43ae4

    • SSDEEP

      24576:IrAVlHBNAS0YKYMpI7Q7XIMFedhr2DjfsJQw9TAPFN:IrAV1rAcufs5Ad

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks