General

  • Target

    8c7650443226a4585ba8c07b9d20b05259391dbdb64770d988860acc042cf827

  • Size

    599KB

  • Sample

    241111-gqyfdavcne

  • MD5

    06712875e69a0726a481ddf65ee1e61b

  • SHA1

    2224a78308047c8e58a595d242bff7fc5d893585

  • SHA256

    8c7650443226a4585ba8c07b9d20b05259391dbdb64770d988860acc042cf827

  • SHA512

    4b681bcb76d3831c72513be21d121c0226ec24fe6eb74d0c5c2eb98b6f7b2238479c0c3e220461ee29498f48443facd1b2eaec44d603c3c1ee6e40aa56d141b9

  • SSDEEP

    12288:ZMrGy90sfswDV04MBYEmWl8Oqy/TztVQRx4Udb3UooRlwm/UsiGD2QO:zybfs54LbE80b4L4pDe

Malware Config

Targets

    • Target

      8c7650443226a4585ba8c07b9d20b05259391dbdb64770d988860acc042cf827

    • Size

      599KB

    • MD5

      06712875e69a0726a481ddf65ee1e61b

    • SHA1

      2224a78308047c8e58a595d242bff7fc5d893585

    • SHA256

      8c7650443226a4585ba8c07b9d20b05259391dbdb64770d988860acc042cf827

    • SHA512

      4b681bcb76d3831c72513be21d121c0226ec24fe6eb74d0c5c2eb98b6f7b2238479c0c3e220461ee29498f48443facd1b2eaec44d603c3c1ee6e40aa56d141b9

    • SSDEEP

      12288:ZMrGy90sfswDV04MBYEmWl8Oqy/TztVQRx4Udb3UooRlwm/UsiGD2QO:zybfs54LbE80b4L4pDe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks