General

  • Target

    tmp

  • Size

    1.1MB

  • Sample

    220921-s4zfdagfa6

  • MD5

    4cc55e311391d1f40219825674315bf2

  • SHA1

    992e42cebf09bdecd7a6fd46e8627b78c5438ff0

  • SHA256

    29f9c2e5e05bc0c3f5df610af9fa619974498ad3f9b8b8b359da00ca26c3a4b4

  • SHA512

    c3f032768f06b72a0996d3ca4b96e8485e96a865f75d90e6ec1a370bf38d76944729c6a036e656af7d61481f676bf9600549ef56942652fd86acc233c2f3e7c3

  • SSDEEP

    12288:Yz81gjoPfaFzhWZVIZ1lxvojGeNtNa8tUpVQkROXnqwoF65O1qEnIa7neK:YYKgyQZVIvlqNR7taRONq9v7eK

Malware Config

Extracted

Family

redline

Botnet

Hacked07/09/2022

C2

171.22.30.129:54686

Targets

    • Target

      tmp

    • Size

      1.1MB

    • MD5

      4cc55e311391d1f40219825674315bf2

    • SHA1

      992e42cebf09bdecd7a6fd46e8627b78c5438ff0

    • SHA256

      29f9c2e5e05bc0c3f5df610af9fa619974498ad3f9b8b8b359da00ca26c3a4b4

    • SHA512

      c3f032768f06b72a0996d3ca4b96e8485e96a865f75d90e6ec1a370bf38d76944729c6a036e656af7d61481f676bf9600549ef56942652fd86acc233c2f3e7c3

    • SSDEEP

      12288:Yz81gjoPfaFzhWZVIZ1lxvojGeNtNa8tUpVQkROXnqwoF65O1qEnIa7neK:YYKgyQZVIvlqNR7taRONq9v7eK

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks