General

  • Target

    bc991d55928dba6981fe1e4e713da7795c25770a509246e21fee731bb61ed645.exe

  • Size

    519KB

  • Sample

    241123-bqwnwszpdm

  • MD5

    f2435fb8c6799acda1a98607f7381892

  • SHA1

    2c69c958f64b8c4a69ecf189b4ce0ef81cd7942e

  • SHA256

    bc991d55928dba6981fe1e4e713da7795c25770a509246e21fee731bb61ed645

  • SHA512

    94d09b12fa9f8bb04e952be4789d10c5c33def690268c35190dbd8853c0f337e77efaba7997221a918388bb2356118cc6f0399636464e9215a4e426a47867b7c

  • SSDEEP

    3072:vpJWJ1sMOjAv4FYh4r+XMV7DXTS74Q2QKsTLx6oimhCS0kJUZVGt5:vpJWJuMD4FYhM+cXTS2QKsnx6WjaVGf

Malware Config

Extracted

Family

redline

C2

141.94.188.138:46419

Attributes
  • auth_value

    3f48b95855158031ae9e7dafcb203009

Targets

    • Target

      bc991d55928dba6981fe1e4e713da7795c25770a509246e21fee731bb61ed645.exe

    • Size

      519KB

    • MD5

      f2435fb8c6799acda1a98607f7381892

    • SHA1

      2c69c958f64b8c4a69ecf189b4ce0ef81cd7942e

    • SHA256

      bc991d55928dba6981fe1e4e713da7795c25770a509246e21fee731bb61ed645

    • SHA512

      94d09b12fa9f8bb04e952be4789d10c5c33def690268c35190dbd8853c0f337e77efaba7997221a918388bb2356118cc6f0399636464e9215a4e426a47867b7c

    • SSDEEP

      3072:vpJWJ1sMOjAv4FYh4r+XMV7DXTS74Q2QKsTLx6oimhCS0kJUZVGt5:vpJWJuMD4FYhM+cXTS2QKsnx6WjaVGf

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks