General

  • Target

    5167037a78f1d24179270fe1f3d0c590090380e341585b8d02558f632903aa3b

  • Size

    479KB

  • Sample

    241111-gvlx5sxqck

  • MD5

    ed37cefa3d7d946b6a113438056491c0

  • SHA1

    94c0b239db2d4ab61ab45e320ffbec2181718468

  • SHA256

    5167037a78f1d24179270fe1f3d0c590090380e341585b8d02558f632903aa3b

  • SHA512

    25b64fb4a3a305eff961e7b38231ae727b6b508f1b14aaf4b6902893e45d18984f4dd315fdcaca8f30f66c137fb7577d412f5b64ced33f117ba796b2cf0da4c3

  • SSDEEP

    12288:9MrCy905S2DA7ozD3QvM6B01MeEkI2Nw/rM3tvGMMWY:zyVMzD3QvA1MenI2W/YdvXMt

Malware Config

Targets

    • Target

      5167037a78f1d24179270fe1f3d0c590090380e341585b8d02558f632903aa3b

    • Size

      479KB

    • MD5

      ed37cefa3d7d946b6a113438056491c0

    • SHA1

      94c0b239db2d4ab61ab45e320ffbec2181718468

    • SHA256

      5167037a78f1d24179270fe1f3d0c590090380e341585b8d02558f632903aa3b

    • SHA512

      25b64fb4a3a305eff961e7b38231ae727b6b508f1b14aaf4b6902893e45d18984f4dd315fdcaca8f30f66c137fb7577d412f5b64ced33f117ba796b2cf0da4c3

    • SSDEEP

      12288:9MrCy905S2DA7ozD3QvM6B01MeEkI2Nw/rM3tvGMMWY:zyVMzD3QvA1MenI2W/YdvXMt

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks