General

  • Target

    08a881867b3ee139dd68ca76b9de83f4dfd3822b46fe88d273ef725362625462.exe

  • Size

    4.6MB

  • Sample

    241123-hz9ensxkcq

  • MD5

    384657170752c53affcc11e751a57ee5

  • SHA1

    13bea63d953032f277de287faa3ea70ae8ba13aa

  • SHA256

    08a881867b3ee139dd68ca76b9de83f4dfd3822b46fe88d273ef725362625462

  • SHA512

    3f343a49e0aa990e1b4bc8f0477581f507606d41066149e83aed5f30efca9a0c15edf5a984e3f0823204d19e5ef0fc3b5ba387ddf2083c576b53ec065fb1d021

  • SSDEEP

    98304:LLYAOeGOR1UrfOMLFsIQhlFp7CNFHKNLBce/lLOscI5TDv:f7Ur/LufhlH7CNFqnXNLO7sTDv

Malware Config

Extracted

Family

redline

Botnet

@PUKPUKich

C2

185.209.22.181:29234

Attributes
  • auth_value

    5a0918bd3e8ede8e02c8dd9d106a996d

Targets

    • Target

      08a881867b3ee139dd68ca76b9de83f4dfd3822b46fe88d273ef725362625462.exe

    • Size

      4.6MB

    • MD5

      384657170752c53affcc11e751a57ee5

    • SHA1

      13bea63d953032f277de287faa3ea70ae8ba13aa

    • SHA256

      08a881867b3ee139dd68ca76b9de83f4dfd3822b46fe88d273ef725362625462

    • SHA512

      3f343a49e0aa990e1b4bc8f0477581f507606d41066149e83aed5f30efca9a0c15edf5a984e3f0823204d19e5ef0fc3b5ba387ddf2083c576b53ec065fb1d021

    • SSDEEP

      98304:LLYAOeGOR1UrfOMLFsIQhlFp7CNFHKNLBce/lLOscI5TDv:f7Ur/LufhlH7CNFqnXNLO7sTDv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks