General

  • Target

    44b48cb323cf659148bf76763a271a5c0a3848a3124691540b5152a26d8f43c5.exe

  • Size

    517KB

  • Sample

    241120-xn2b9awlfl

  • MD5

    3fe247aeec27844a59889b6346408ab8

  • SHA1

    7097ee2ba26d8e884b9a8649f3f259fb94dd5a64

  • SHA256

    44b48cb323cf659148bf76763a271a5c0a3848a3124691540b5152a26d8f43c5

  • SHA512

    277b770cf8c3df4bc4c606d0821a6dc43ca5adf30f0f5f68111987f44d5f786d402c3c04d0eef081473e526d12c6a548091ce3ce45c142fa42bcec91f17b73ea

  • SSDEEP

    3072:AovMn9OFckvzvs6fsoZxOWiyUkVwDCw2yZjCgEPwbZmp+THPJZ9k+i8M:AovO9OFcczE6fsW4W5rVcjHCgTpNZ9N0

Malware Config

Extracted

Family

redline

C2

141.94.188.138:46419

Attributes
  • auth_value

    3f48b95855158031ae9e7dafcb203009

Targets

    • Target

      44b48cb323cf659148bf76763a271a5c0a3848a3124691540b5152a26d8f43c5.exe

    • Size

      517KB

    • MD5

      3fe247aeec27844a59889b6346408ab8

    • SHA1

      7097ee2ba26d8e884b9a8649f3f259fb94dd5a64

    • SHA256

      44b48cb323cf659148bf76763a271a5c0a3848a3124691540b5152a26d8f43c5

    • SHA512

      277b770cf8c3df4bc4c606d0821a6dc43ca5adf30f0f5f68111987f44d5f786d402c3c04d0eef081473e526d12c6a548091ce3ce45c142fa42bcec91f17b73ea

    • SSDEEP

      3072:AovMn9OFckvzvs6fsoZxOWiyUkVwDCw2yZjCgEPwbZmp+THPJZ9k+i8M:AovO9OFcczE6fsW4W5rVcjHCgTpNZ9N0

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks