General

  • Target

    362826111290a7583e5e10fb414dad478e0339e378adae0e91e135216ce6ccb9

  • Size

    262KB

  • Sample

    241110-1mphvavphz

  • MD5

    36340f790211b94f79e5e9b197fbef5c

  • SHA1

    80cd23ade89580c8ac084e7c31ce67c12a581fb0

  • SHA256

    362826111290a7583e5e10fb414dad478e0339e378adae0e91e135216ce6ccb9

  • SHA512

    866a71f808257eff3255904b9e5748c857bba56905129db93022423b892b0397797d185d6ea8c94302beea017fc9b0a544bfd1d08c628d4f80463e6daf7fa52d

  • SSDEEP

    3072:Ox/qx1OuyRyXFaQ7RQ05CTEezbClXv8r8+oFe6gobFHFzA+E+2SUHcj/:a/qx1aEFaQ7W05AEezbMPZFzAy2Sc

Malware Config

Extracted

Family

redline

Botnet

sheron

C2

83.97.73.129:19068

Attributes
  • auth_value

    2d067e7e2372227d3a03b335260112e9

Targets

    • Target

      362826111290a7583e5e10fb414dad478e0339e378adae0e91e135216ce6ccb9

    • Size

      262KB

    • MD5

      36340f790211b94f79e5e9b197fbef5c

    • SHA1

      80cd23ade89580c8ac084e7c31ce67c12a581fb0

    • SHA256

      362826111290a7583e5e10fb414dad478e0339e378adae0e91e135216ce6ccb9

    • SHA512

      866a71f808257eff3255904b9e5748c857bba56905129db93022423b892b0397797d185d6ea8c94302beea017fc9b0a544bfd1d08c628d4f80463e6daf7fa52d

    • SSDEEP

      3072:Ox/qx1OuyRyXFaQ7RQ05CTEezbClXv8r8+oFe6gobFHFzA+E+2SUHcj/:a/qx1aEFaQ7W05AEezbMPZFzAy2Sc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks