General

  • Target

    8376d08569cf9c451f3c9df27eaa1a6dc7b5b53f9d955150c2da9735fffb3aa9.exe

  • Size

    389KB

  • Sample

    241122-pva5mswqcp

  • MD5

    02f0097643ae634aeb42ff327ac109fd

  • SHA1

    bd78931fd0ba86e0ade849c007c654714c7e30db

  • SHA256

    8376d08569cf9c451f3c9df27eaa1a6dc7b5b53f9d955150c2da9735fffb3aa9

  • SHA512

    b10c1a1ee391186cfe225fc4428129f02111e80b24516e47a114886a7200c235f9153d7168d9c1d08c3ab5c05ba5451f50ffa6d5eb774402ffb486a3aab79bd6

  • SSDEEP

    12288:FUQlVRJpCBG505xdS3u5AnQBOjAPOcMcdDE3W8n1:FJhJbUC

Malware Config

Extracted

Family

redline

Botnet

TechnoGamerzModMenuInstallerV2.12

C2

185.215.113.55:36801

Attributes
  • auth_value

    5c57f1eb36bb351b7007ba406bba7afc

Targets

    • Target

      8376d08569cf9c451f3c9df27eaa1a6dc7b5b53f9d955150c2da9735fffb3aa9.exe

    • Size

      389KB

    • MD5

      02f0097643ae634aeb42ff327ac109fd

    • SHA1

      bd78931fd0ba86e0ade849c007c654714c7e30db

    • SHA256

      8376d08569cf9c451f3c9df27eaa1a6dc7b5b53f9d955150c2da9735fffb3aa9

    • SHA512

      b10c1a1ee391186cfe225fc4428129f02111e80b24516e47a114886a7200c235f9153d7168d9c1d08c3ab5c05ba5451f50ffa6d5eb774402ffb486a3aab79bd6

    • SSDEEP

      12288:FUQlVRJpCBG505xdS3u5AnQBOjAPOcMcdDE3W8n1:FJhJbUC

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks