General

  • Target
    Hack.exe
  • Size 350KB
  • Sample230515-1pxbgaac84
  • SHA256 dbf87d0624b33c36770a628e1dc17682628bd5e83807f17154d0b2938e57f4b4
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • redline

C2
  • 94.142.138.147:48665

Attributes
  • auth_value

    523231e501a3476ca1e0b47280cb8095

Targets

    • Target
      Hack.exe
    • Size 350KB
    • SHA256 dbf87d0624b33c36770a628e1dc17682628bd5e83807f17154d0b2938e57f4b4
    • MD5 SHA1 SHA512 SSDEEP
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks