General

  • Target

    build.exe

  • Size

    300KB

  • Sample

    240525-q8ntbseh4t

  • MD5

    79f58d9e5c31290d1005b8ed75c2b8b2

  • SHA1

    bc36dfa1fde40a857fa61829c8d4772674e9d90e

  • SHA256

    bb49165d542ebd7a63c727fcb01fc32a77fa319beb4f2d265a5936619f89bea5

  • SHA512

    219df5b014e32df266c6673c1b2248898723496ac18881d3498ee945f242faab30a4e98feb70b22222affa31c43d1d7b1c9917091963091911b916cde0ec3c04

  • SSDEEP

    3072:ecZqf7D347p/0+mAKky4fUQIgdPB1fA0PuTVAtkxze3RweqiOL2bBOA:ecZqf7DIlnPPtB1fA0GTV8kEQL

Malware Config

Extracted

Family

redline

Botnet

test

C2

172.22.236.166:1912

Targets

    • Target

      build.exe

    • Size

      300KB

    • MD5

      79f58d9e5c31290d1005b8ed75c2b8b2

    • SHA1

      bc36dfa1fde40a857fa61829c8d4772674e9d90e

    • SHA256

      bb49165d542ebd7a63c727fcb01fc32a77fa319beb4f2d265a5936619f89bea5

    • SHA512

      219df5b014e32df266c6673c1b2248898723496ac18881d3498ee945f242faab30a4e98feb70b22222affa31c43d1d7b1c9917091963091911b916cde0ec3c04

    • SSDEEP

      3072:ecZqf7D347p/0+mAKky4fUQIgdPB1fA0PuTVAtkxze3RweqiOL2bBOA:ecZqf7DIlnPPtB1fA0GTV8kEQL

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks