General

  • Target

    @MavrodiBlack_alice.exe

  • Size

    1.7MB

  • Sample

    230516-pjphwshg7v

  • MD5

    dcdc4c52c6a415cabd01d1c474e2e864

  • SHA1

    b820f7e29b10e9cb1c9ae973e038e44e2ba8c54c

  • SHA256

    277d23a2a848349b79d6a9d47cef165e6b8e8e160fed97dec27418bd468e402c

  • SHA512

    df2f1bd2d831c7e78eabbeee5547e4ff090289d66c66a84cad0910398ba7c152bc2a133dbda69b541d48173f837505a8321d6ccc51781fb7495c9e2ce2046270

  • SSDEEP

    6144:jdrXj45Du9IYEQIq72YAO47tzr8dDvFAW1MNWcqP3nM057h:jdrj45uF1yJEDvqOlX57h

Score
10/10

Malware Config

Extracted

Family

redline

C2

37.220.87.13:48790

Attributes
  • auth_value

    5ccbd06c4978ff4912009e42060b2daf

Targets

    • Target

      @MavrodiBlack_alice.exe

    • Size

      1.7MB

    • MD5

      dcdc4c52c6a415cabd01d1c474e2e864

    • SHA1

      b820f7e29b10e9cb1c9ae973e038e44e2ba8c54c

    • SHA256

      277d23a2a848349b79d6a9d47cef165e6b8e8e160fed97dec27418bd468e402c

    • SHA512

      df2f1bd2d831c7e78eabbeee5547e4ff090289d66c66a84cad0910398ba7c152bc2a133dbda69b541d48173f837505a8321d6ccc51781fb7495c9e2ce2046270

    • SSDEEP

      6144:jdrXj45Du9IYEQIq72YAO47tzr8dDvFAW1MNWcqP3nM057h:jdrj45uF1yJEDvqOlX57h

    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks