General

  • Target

    1847786afaa400b8daf06818754765b3

  • Size

    696KB

  • Sample

    241110-1yr34swhjf

  • MD5

    1847786afaa400b8daf06818754765b3

  • SHA1

    352c4c1cb8a61f87edb689a633ef0212cb7bcc54

  • SHA256

    8cd23c93e05ba34c59dc1a1490b3f309fb94f9743ef4bb474af3abf839f448f7

  • SHA512

    ef93cf7e33f0efb74ce9b94394f8e4d87674e3346331fd270763310649e8f8ab2425145a1dc0d23615c16db9ac89ec0711d276e54e0ad6a48776f42f81054031

  • SSDEEP

    12288:Ix53DC3orpmfNxnWqQrMTig+7XqO+4qYYjKTVlK2Xck4jhUrrSP0lOIW:iDIorp6NxWqQrMN+7aO+RYD/PFWuOPuM

Malware Config

Extracted

Family

redline

C2

79.137.192.9:19788

Attributes
  • auth_value

    1b43d503c91d087751245f237058b5aa

Targets

    • Target

      2696b7a7292422a01a6edb7b1c55afa1

    • Size

      2.3MB

    • MD5

      2696b7a7292422a01a6edb7b1c55afa1

    • SHA1

      4780f2018ac194d0d7dd03a96bb7d0577957c58b

    • SHA256

      b72536301ba0b8834cc027b2c9d0bfa887d91c832e04802f96d81778a4c38766

    • SHA512

      ed17c92cb2341aae73fead505ccd1f502c73acf0c30d660f00fbb55e1b26eebdb30593b1b2530df080c50e8ed0b0332f96648a4d9cf8445da1030273ce899fe3

    • SSDEEP

      24576:5u/wnYMYOpq1BmYOMYhdN5tdxNr1J537v8LWfvSL4pu5l3RuQ55313b:5u/U57378LWfvSM0l3h

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks