General

  • Target

    nuIex_crypted.exe

  • Size

    1.8MB

  • Sample

    230830-q8a78sfg34

  • MD5

    55994b5392dc148b6ffad440403bcf06

  • SHA1

    8d81e17eb48aa37f77bfde940d24cb912075ad57

  • SHA256

    cfd3caa9dbbbb9d4f6fff3597a2155b5f04e898cd082c84b368fe94943830108

  • SHA512

    eb8d1059a71b202f8eb5c3432e55c6b4ad6f51024552ca3b0b6635220232700ad717e86928376f3cf91d579207b9baafbd218e0c65a2c40a726dc78b8ce8ba53

  • SSDEEP

    24576:8HIsYF0d7MAjKPQuw0y+9qHfdLKt+i/Y:8Fd7MAjKP3k/dLz

Score
10/10

Malware Config

Extracted

Family

redline

C2

94.142.138.147:23000

Attributes
  • auth_value

    ccff08893879012905ea16489b7e8ced

Targets

    • Target

      nuIex_crypted.exe

    • Size

      1.8MB

    • MD5

      55994b5392dc148b6ffad440403bcf06

    • SHA1

      8d81e17eb48aa37f77bfde940d24cb912075ad57

    • SHA256

      cfd3caa9dbbbb9d4f6fff3597a2155b5f04e898cd082c84b368fe94943830108

    • SHA512

      eb8d1059a71b202f8eb5c3432e55c6b4ad6f51024552ca3b0b6635220232700ad717e86928376f3cf91d579207b9baafbd218e0c65a2c40a726dc78b8ce8ba53

    • SSDEEP

      24576:8HIsYF0d7MAjKPQuw0y+9qHfdLKt+i/Y:8Fd7MAjKP3k/dLz

    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks