General

  • Target

    744a8dc461d67b8b0b499f7f5847ed3fe5b15388bb724032544a3363446dd436.exe

  • Size

    4.6MB

  • Sample

    241122-pvr36a1jds

  • MD5

    79da86e70f87347487139e0f69b53c03

  • SHA1

    257927112e39ef54aad023313d27b4a2d08ed7e5

  • SHA256

    744a8dc461d67b8b0b499f7f5847ed3fe5b15388bb724032544a3363446dd436

  • SHA512

    a54f4d432b291406b1289f7bf9843b3d62559c2cf3d8497a3c1563c364fb32c1095c0ab8244b0295d8b70e0df4359c1b23b09c95ad41f5033998c4b625183d1b

  • SSDEEP

    98304:4LmDXxsBZXpB6J5K1LoZkc2O8dzTDw5fWQ3dn8U3JJ9BL1:luBtuJOoLVorwNWQ3dn8U3vjL1

Malware Config

Extracted

Family

redline

Botnet

@dalbaeb2228

C2

190.2.136.29:15554

Attributes
  • auth_value

    c3619bd2b5611a61169719e72acd942d

Targets

    • Target

      744a8dc461d67b8b0b499f7f5847ed3fe5b15388bb724032544a3363446dd436.exe

    • Size

      4.6MB

    • MD5

      79da86e70f87347487139e0f69b53c03

    • SHA1

      257927112e39ef54aad023313d27b4a2d08ed7e5

    • SHA256

      744a8dc461d67b8b0b499f7f5847ed3fe5b15388bb724032544a3363446dd436

    • SHA512

      a54f4d432b291406b1289f7bf9843b3d62559c2cf3d8497a3c1563c364fb32c1095c0ab8244b0295d8b70e0df4359c1b23b09c95ad41f5033998c4b625183d1b

    • SSDEEP

      98304:4LmDXxsBZXpB6J5K1LoZkc2O8dzTDw5fWQ3dn8U3JJ9BL1:luBtuJOoLVorwNWQ3dn8U3vjL1

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks