General

  • Target

    9527c5ca5596b22722c968413898af54aa99836866ba1633eca5c435e658f2e2

  • Size

    282KB

  • Sample

    230608-gc6vladb9w

  • MD5

    36c8895442519b919b04d05d196c73f4

  • SHA1

    859f61c12f335e253f858a79ebd8a1d29e8c6404

  • SHA256

    9527c5ca5596b22722c968413898af54aa99836866ba1633eca5c435e658f2e2

  • SHA512

    f5aae082c8bc49a270bbf3903fe897485757ec5ad3a58a54efd88358c7d1a04ea4a5adb90b39c62f15f0c59ff0150b1783f76739bd216a7770c0e9f2ec65cd75

  • SSDEEP

    6144:6QvoWvJEGHKwvTygXUNVS4MGh1aBFrvz1xcxcWhjrt:6U5hyR1aBFrvz1xcxdjrt

Malware Config

Extracted

Family

redline

Botnet

sheron

C2

83.97.73.129:19068

Attributes
  • auth_value

    2d067e7e2372227d3a03b335260112e9

Targets

    • Target

      9527c5ca5596b22722c968413898af54aa99836866ba1633eca5c435e658f2e2

    • Size

      282KB

    • MD5

      36c8895442519b919b04d05d196c73f4

    • SHA1

      859f61c12f335e253f858a79ebd8a1d29e8c6404

    • SHA256

      9527c5ca5596b22722c968413898af54aa99836866ba1633eca5c435e658f2e2

    • SHA512

      f5aae082c8bc49a270bbf3903fe897485757ec5ad3a58a54efd88358c7d1a04ea4a5adb90b39c62f15f0c59ff0150b1783f76739bd216a7770c0e9f2ec65cd75

    • SSDEEP

      6144:6QvoWvJEGHKwvTygXUNVS4MGh1aBFrvz1xcxcWhjrt:6U5hyR1aBFrvz1xcxdjrt

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks