General

  • Target

    f4d0e01d739600d5d53398956b1d244b557363e8ddf3e2826912142ebc86e39b

  • Size

    414KB

  • Sample

    231114-tk67jsde4z

  • MD5

    e24840c3471dae7a06ba70d5b94633f8

  • SHA1

    cd23f2d95d750219f2b40e5ae376dbd051188ca4

  • SHA256

    f4d0e01d739600d5d53398956b1d244b557363e8ddf3e2826912142ebc86e39b

  • SHA512

    799636374c223d364af10265f789af0cc2bf3bd22630c407d8b74acc1fb5ef3e1dda47e068fbba71dcc6b911ba45458f9e7ab5c58bef7774231ccbf8bf496fcc

  • SSDEEP

    12288:wgUKRE6TdIdOju2/COYWyDIxfAlqMHk+LNZiteS/jn+6O0cCdIh9:UKqmCOYWyDIxfAlqMHk+LNZite6ST0yh

Malware Config

Extracted

Family

redline

Botnet

taiga

C2

5.42.92.51:19057

Targets

    • Target

      f4d0e01d739600d5d53398956b1d244b557363e8ddf3e2826912142ebc86e39b

    • Size

      414KB

    • MD5

      e24840c3471dae7a06ba70d5b94633f8

    • SHA1

      cd23f2d95d750219f2b40e5ae376dbd051188ca4

    • SHA256

      f4d0e01d739600d5d53398956b1d244b557363e8ddf3e2826912142ebc86e39b

    • SHA512

      799636374c223d364af10265f789af0cc2bf3bd22630c407d8b74acc1fb5ef3e1dda47e068fbba71dcc6b911ba45458f9e7ab5c58bef7774231ccbf8bf496fcc

    • SSDEEP

      12288:wgUKRE6TdIdOju2/COYWyDIxfAlqMHk+LNZiteS/jn+6O0cCdIh9:UKqmCOYWyDIxfAlqMHk+LNZite6ST0yh

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks