General

  • Target

    9332154e4426648608a5861369d7203244643a47893823a593cbfd2f8725e1bf.exe

  • Size

    4.6MB

  • Sample

    241124-eljqbayrbq

  • MD5

    e10ce6163e83dbaecb97e5d359770560

  • SHA1

    f25af2df99470c166c3f7958d4a2c2f3c9caed09

  • SHA256

    9332154e4426648608a5861369d7203244643a47893823a593cbfd2f8725e1bf

  • SHA512

    5186887cea3af43446f8c4b05af6f6481946aa8cc44a6247f208827b920dbcf7201557b7f00312d73cab64331a4d29ccc0993ab3ccfab5ca7c75a128ab2be720

  • SSDEEP

    98304:OLfFTB1dIdS0gBAFCzZKmNrCa9iqWKa4BbYMzMxahb:EnGd2Bepk7iq+MbYMzx

Malware Config

Extracted

Family

redline

Botnet

@admbx

C2

5.188.118.163:80

Attributes
  • auth_value

    9bde7608ef33d6cbd8c01687cdd53196

Targets

    • Target

      9332154e4426648608a5861369d7203244643a47893823a593cbfd2f8725e1bf.exe

    • Size

      4.6MB

    • MD5

      e10ce6163e83dbaecb97e5d359770560

    • SHA1

      f25af2df99470c166c3f7958d4a2c2f3c9caed09

    • SHA256

      9332154e4426648608a5861369d7203244643a47893823a593cbfd2f8725e1bf

    • SHA512

      5186887cea3af43446f8c4b05af6f6481946aa8cc44a6247f208827b920dbcf7201557b7f00312d73cab64331a4d29ccc0993ab3ccfab5ca7c75a128ab2be720

    • SSDEEP

      98304:OLfFTB1dIdS0gBAFCzZKmNrCa9iqWKa4BbYMzMxahb:EnGd2Bepk7iq+MbYMzx

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks