General

  • Target

    62eb49220dad28ffe753ec1ac5e549da8659b344

  • Size

    304KB

  • Sample

    241111-bpna5azcmb

  • MD5

    81a3940dd3621ab40773d20dfb6a01c3

  • SHA1

    62eb49220dad28ffe753ec1ac5e549da8659b344

  • SHA256

    6864c883260974b6c14e455aa32e9d7ff02fd27f47dd9574fb5e5279116cd859

  • SHA512

    8767b7ad8cf744f8c5dca5ab9b3648dc22043d68066627e23a4407b458387bd5e3b0022a428f97431c025e7a54540ce51a388e4adde098ed8947614c9fe0fd13

  • SSDEEP

    6144:eqhMz7iEt7kdq/B0QUnWeXAOwT4DZ/N4ZNPuGyLY4QGh86f:NhMz7iERv1UbX7dN+0GZ4QGhlf

Malware Config

Extracted

Family

redline

Botnet

REDLINEVIP (TG: @Fatherofcarders) 150K

C2

178.32.215.163:17189

Attributes
  • auth_value

    0f7b7a0ecd1083169a37fc5d6e242919

Targets

    • Target

      62eb49220dad28ffe753ec1ac5e549da8659b344

    • Size

      304KB

    • MD5

      81a3940dd3621ab40773d20dfb6a01c3

    • SHA1

      62eb49220dad28ffe753ec1ac5e549da8659b344

    • SHA256

      6864c883260974b6c14e455aa32e9d7ff02fd27f47dd9574fb5e5279116cd859

    • SHA512

      8767b7ad8cf744f8c5dca5ab9b3648dc22043d68066627e23a4407b458387bd5e3b0022a428f97431c025e7a54540ce51a388e4adde098ed8947614c9fe0fd13

    • SSDEEP

      6144:eqhMz7iEt7kdq/B0QUnWeXAOwT4DZ/N4ZNPuGyLY4QGh86f:NhMz7iERv1UbX7dN+0GZ4QGhlf

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks