General

  • Target

    719a05d98e81277de61beb8541ac5642a84df53c08ac00adf10957093df7ce6d.exe

  • Size

    516KB

  • Sample

    241122-l3bvcsvkbq

  • MD5

    2a288d02e31905e6a46c28150839d68f

  • SHA1

    2d5e4fd9699e8906f8fb03b882e1df4bcc2f97b2

  • SHA256

    719a05d98e81277de61beb8541ac5642a84df53c08ac00adf10957093df7ce6d

  • SHA512

    b45394b348e7af94f524c5e517a1cac6ccd77deb6dfbd5415449729611a6346f5b9e100e914304c661187a12bf195d0fab8b60b1c03b9443d7a1457715a8c7d4

  • SSDEEP

    3072:nO8ccmPptXdaWA5hK7BnNhPsCa3C/SOW1RfKACUSr0IpI:nOXc6tkW0K1nnMC6nRfKACUa0IG

Malware Config

Extracted

Family

redline

C2

141.94.188.138:46419

Attributes
  • auth_value

    3f48b95855158031ae9e7dafcb203009

Targets

    • Target

      719a05d98e81277de61beb8541ac5642a84df53c08ac00adf10957093df7ce6d.exe

    • Size

      516KB

    • MD5

      2a288d02e31905e6a46c28150839d68f

    • SHA1

      2d5e4fd9699e8906f8fb03b882e1df4bcc2f97b2

    • SHA256

      719a05d98e81277de61beb8541ac5642a84df53c08ac00adf10957093df7ce6d

    • SHA512

      b45394b348e7af94f524c5e517a1cac6ccd77deb6dfbd5415449729611a6346f5b9e100e914304c661187a12bf195d0fab8b60b1c03b9443d7a1457715a8c7d4

    • SSDEEP

      3072:nO8ccmPptXdaWA5hK7BnNhPsCa3C/SOW1RfKACUSr0IpI:nOXc6tkW0K1nnMC6nRfKACUa0IG

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks