General

  • Target

    641274abcd0a7e8ca2d5d1cee45c2bdd09554aa101d40b31921b75cae1fb69f8.exe

  • Size

    390KB

  • Sample

    241121-efngbaxhqg

  • MD5

    67ac9c807f6cda0b5159d086f5dac43c

  • SHA1

    26a5507dd29cd1b5e26c2351548e1664af4bbe22

  • SHA256

    641274abcd0a7e8ca2d5d1cee45c2bdd09554aa101d40b31921b75cae1fb69f8

  • SHA512

    c0a05784fed3989cafdea86418921ace116522548bc58d22056a6bf80c2a99a2568e11261dbf260dbf43456b8e280b971813122dc3674017a70f53c2249aa7ea

  • SSDEEP

    12288:BQoTVgJpnBG5P5x4sMq8ZMeFrXy9rpdDEzBYDC+x:mTJHCf

Malware Config

Extracted

Family

redline

Botnet

newtes33

C2

kanerinasto.xyz:81

Attributes
  • auth_value

    11c4274dec83efea007b1dcb4478d075

Targets

    • Target

      641274abcd0a7e8ca2d5d1cee45c2bdd09554aa101d40b31921b75cae1fb69f8.exe

    • Size

      390KB

    • MD5

      67ac9c807f6cda0b5159d086f5dac43c

    • SHA1

      26a5507dd29cd1b5e26c2351548e1664af4bbe22

    • SHA256

      641274abcd0a7e8ca2d5d1cee45c2bdd09554aa101d40b31921b75cae1fb69f8

    • SHA512

      c0a05784fed3989cafdea86418921ace116522548bc58d22056a6bf80c2a99a2568e11261dbf260dbf43456b8e280b971813122dc3674017a70f53c2249aa7ea

    • SSDEEP

      12288:BQoTVgJpnBG5P5x4sMq8ZMeFrXy9rpdDEzBYDC+x:mTJHCf

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks