General

  • Target

    7229b684c59106c5aa79d260124b91aba4821039abcd01eb0fb18bab452a4a03

  • Size

    213KB

  • Sample

    241110-3nd5ls1jbk

  • MD5

    c25e6474c29035e6a0b07994ef05d08d

  • SHA1

    61c0971b503e37dacc97291dc38fb270a8a790f1

  • SHA256

    7229b684c59106c5aa79d260124b91aba4821039abcd01eb0fb18bab452a4a03

  • SHA512

    bc7c2bb697e0875def8a54007880a1196f5f5437c0086bb6318cbd455f2acc1a9b4727a6f59f591b2c647ea8073a15789e35f2a4a34e90a37a3c6c118e91cfc3

  • SSDEEP

    6144:2F2dqRHCEKj/aJ5Dfi2izzD1gIZfS8wgDAG8zc:2OyVKzaJ9ytfZfSwDAG8zc

Malware Config

Extracted

Family

redline

C2

135.181.241.192:4327

Attributes
  • auth_value

    a909e2aaecf96137978fea4f86400b9b

Targets

    • Target

      fc8ae1d5ed647ebb404feb41ea0eeab7e2a1ab49ceac2cf78ebf366fdd66bda8.exe

    • Size

      355KB

    • MD5

      7fb0614b0d6f42336d086e72ab27505a

    • SHA1

      9a47d18ca3e3cdda50f98a72f7a249dd82cc9774

    • SHA256

      fc8ae1d5ed647ebb404feb41ea0eeab7e2a1ab49ceac2cf78ebf366fdd66bda8

    • SHA512

      7f795adc232843a4ae77f0f5b46eb77340eba05056d8c9fe59322fe1a7a6329b380b2fa53daf318b20451ca83f434da5e525740f1042e699affc2004d87936f6

    • SSDEEP

      6144:pqMEWVBziVImDyIO3QQn/Qcw+lplM1sRqyjxr7ya3F5rTcys0W1:pqMEWzziVneVCGqy9/LV1ZsJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks