General

  • Target

    093a9f62abe2110024a18f646a2824321543e7b49d6378f93cb977a12b7d5a2c.exe

  • Size

    4.5MB

  • Sample

    241121-mv9l4awkfl

  • MD5

    bad3859e7cf2a0cbf3928b542bf67fd1

  • SHA1

    af2966a18c1dcf450897566db24eadda6e08a25b

  • SHA256

    093a9f62abe2110024a18f646a2824321543e7b49d6378f93cb977a12b7d5a2c

  • SHA512

    778652bd26b722aade171f38536a3e983a24eca8b5b0c1af35835aa70d853e871c6949e29e4bf8a6ada93c9d6705725ff48f407c62acf16a9252606763d4b75d

  • SSDEEP

    98304:TL6ZnmR/d9dPavLzls0SbsQKUN+YQPVfSqkOUs2gO8vGW2F3tG:gnmraDziH1FQfSqkOJduz+

Malware Config

Extracted

Family

redline

Botnet

rich

C2

185.238.169.158:7765

Attributes
  • auth_value

    60ec0c9678621becd603caa1ce0c1314

Targets

    • Target

      093a9f62abe2110024a18f646a2824321543e7b49d6378f93cb977a12b7d5a2c.exe

    • Size

      4.5MB

    • MD5

      bad3859e7cf2a0cbf3928b542bf67fd1

    • SHA1

      af2966a18c1dcf450897566db24eadda6e08a25b

    • SHA256

      093a9f62abe2110024a18f646a2824321543e7b49d6378f93cb977a12b7d5a2c

    • SHA512

      778652bd26b722aade171f38536a3e983a24eca8b5b0c1af35835aa70d853e871c6949e29e4bf8a6ada93c9d6705725ff48f407c62acf16a9252606763d4b75d

    • SSDEEP

      98304:TL6ZnmR/d9dPavLzls0SbsQKUN+YQPVfSqkOUs2gO8vGW2F3tG:gnmraDziH1FQfSqkOJduz+

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks