General

  • Target

    0eb0e703f97a3aa89081f583fed6cd8b3312804cae4f166aeaf354278842afaa

  • Size

    2.4MB

  • Sample

    221101-kb22sshfg5

  • MD5

    64c818e6bf960cded14b063e90dcba15

  • SHA1

    45a59649987f64e01a8465626bb13166f1c2e62c

  • SHA256

    0eb0e703f97a3aa89081f583fed6cd8b3312804cae4f166aeaf354278842afaa

  • SHA512

    c8734967e707cf2ce1ae05d35d04189d5f7d2d0febe371300349ae8b826f5c5eb0c38cb92fccb4af9534b00153d2b8caa4f4264488f01f36ca9ec710713fa156

  • SSDEEP

    24576:U2jcZqpYAYt7OSCSMnSo6ert+i16mcv+ioIp6r3ZMh0SLh4RIVal3RuQ55313n:U2oZbmxcmzIp6r3ZQ0Slul3p

Score
10/10

Malware Config

Extracted

Family

redline

C2

185.148.39.219:47029

Attributes
  • auth_value

    f8868787260be95572b321e957e39e5a

Targets

    • Target

      0eb0e703f97a3aa89081f583fed6cd8b3312804cae4f166aeaf354278842afaa

    • Size

      2.4MB

    • MD5

      64c818e6bf960cded14b063e90dcba15

    • SHA1

      45a59649987f64e01a8465626bb13166f1c2e62c

    • SHA256

      0eb0e703f97a3aa89081f583fed6cd8b3312804cae4f166aeaf354278842afaa

    • SHA512

      c8734967e707cf2ce1ae05d35d04189d5f7d2d0febe371300349ae8b826f5c5eb0c38cb92fccb4af9534b00153d2b8caa4f4264488f01f36ca9ec710713fa156

    • SSDEEP

      24576:U2jcZqpYAYt7OSCSMnSo6ert+i16mcv+ioIp6r3ZMh0SLh4RIVal3RuQ55313n:U2oZbmxcmzIp6r3ZQ0Slul3p

    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks