General

  • Target
    Ghost_VPN_Free_setup.zip
  • Size 933KB
  • Sample230329-ws6xvsba4s
  • SHA256 bc99d1bb9a12367979fcd24b696af85816f730c968f4e99df1c506ca99fa709f
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • redline

C2
  • 37.220.87.13:48790

Attributes
  • auth_value

    7da9acd8c6c263ef0dde36b5fd07c25f

Targets

    • Target
      Ghost_VPN_Free_setup.exe
    • Size 800.4MB
    • SHA256 4556643b2e3a495d9a11e054688f706fcde07aa49d103b9993c7ef98090e003f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks