General

  • Target

    50713ddde552c948328e51b20ea03475ce5f70dfdda32e60a8d10afc431f7482

  • Size

    1.8MB

  • Sample

    241110-13c5rawenp

  • MD5

    638fa83fc8f2137596493f9c2ce0af93

  • SHA1

    a4521a339070889b453ddafab28793e6169c5499

  • SHA256

    50713ddde552c948328e51b20ea03475ce5f70dfdda32e60a8d10afc431f7482

  • SHA512

    5a8a443e25b80b2c258bab76d1baf7cfbd80ac69f7918c37f34320f86fa986b04d45ea25939b86ab90254652abba93c5d5f7c47cf4ec11bdb04d13e1b36e21e8

  • SSDEEP

    24576:BE51LZmjqi/RQD8nxD1yh3LdlXo1rgLtVVCXw2y2cAJm:CRZmjH5hD1IPVQRo

Malware Config

Extracted

Family

redline

Botnet

usa1

C2

212.114.52.221:9339

Attributes
  • auth_value

    1bf2a129a7db572de79a4e48155856fb

Targets

    • Target

      50713ddde552c948328e51b20ea03475ce5f70dfdda32e60a8d10afc431f7482

    • Size

      1.8MB

    • MD5

      638fa83fc8f2137596493f9c2ce0af93

    • SHA1

      a4521a339070889b453ddafab28793e6169c5499

    • SHA256

      50713ddde552c948328e51b20ea03475ce5f70dfdda32e60a8d10afc431f7482

    • SHA512

      5a8a443e25b80b2c258bab76d1baf7cfbd80ac69f7918c37f34320f86fa986b04d45ea25939b86ab90254652abba93c5d5f7c47cf4ec11bdb04d13e1b36e21e8

    • SSDEEP

      24576:BE51LZmjqi/RQD8nxD1yh3LdlXo1rgLtVVCXw2y2cAJm:CRZmjH5hD1IPVQRo

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks