General

  • Target

    Photoshop_Set-Up (Crack).rar

  • Size

    317KB

  • Sample

    240505-l14glaaa44

  • MD5

    d1e9e15468b64318d2303391c8f06089

  • SHA1

    8f634b142e45efdf4c020bd54da06d9f2c1e811d

  • SHA256

    7324a5ba7985907b4d8be1365d6b243bf90da9d33c0aa5b80d3753e17fca10d2

  • SHA512

    985f6f58db4680725b619a90d395d264c8840cff83520494415002d7c539bfae3e4255d8209184ea35ffd74b58a34505779a04ec302676ef793bc16891182857

  • SSDEEP

    6144:DhrYm/1CdyrkHbj16mXaRfJxzApQvERhIV9ByhkM9wTGqx3PhGwg4:DhrJ1gHVcBxzApQlQ+M9wXxVX

Malware Config

Extracted

Family

redline

Botnet

@Nikitosikkc123

C2

45.15.156.167:80

Targets

    • Target

      Photoshop_Set-Up.exe

    • Size

      648KB

    • MD5

      9e2ac58b568bd485fa021d4739adce5a

    • SHA1

      f2485830a92e389da6efddf51294d67f5a2cdb2b

    • SHA256

      a402088ca07607fa3da57d19fa0cd2b14a2df0d774b0b5578fe50ff42fece8fb

    • SHA512

      e9eb4a8ef5c6e4dc68526ad24d77a751b0c068dcced62da25ebce364e3dd98df575f0af8719f64b0dffb2fc988089eae479ab5afd6dfb8b7a3993cf24078129a

    • SSDEEP

      12288:uqM8KfdgHVqnI9oOWpryhDrDLsPLws+zwn90RNYiVBdH0W4UsySYSja/48u85qpK:bzkdg1iUoOWFo

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks