General

  • Target

    launchеr-pс.zip

  • Size

    30.0MB

  • Sample

    241127-y4swgsvnan

  • MD5

    7814873eb175159cdecb6c6276737e2e

  • SHA1

    ed4fa5112d9092b654c0bc4639ede789f2071636

  • SHA256

    d3f7cb3de3822efc9adac2b898bae8078bdea2806b97a02260c5f10a47647460

  • SHA512

    b02604c9311ed85923bc6d53ad1dd9ec6c93a8c4600986156042c9d7fbce5517a8d4157aa779450f1b8ed67fb75dd34a697eddec09ee25bb641d8d53db132aa9

  • SSDEEP

    786432:u3/cI91oBjJm7QaC6v72bQgVR6uNliUqMAV7sDpE8l5:u3kIL1RCiq0gnpNCVItz

Malware Config

Extracted

Family

redline

Botnet

@miromistin0

C2

94.142.138.4:80

Attributes
  • auth_value

    2ee380277e944675703ad248459af8c3

Targets

    • Target

      launchеr-pс.zip

    • Size

      30.0MB

    • MD5

      7814873eb175159cdecb6c6276737e2e

    • SHA1

      ed4fa5112d9092b654c0bc4639ede789f2071636

    • SHA256

      d3f7cb3de3822efc9adac2b898bae8078bdea2806b97a02260c5f10a47647460

    • SHA512

      b02604c9311ed85923bc6d53ad1dd9ec6c93a8c4600986156042c9d7fbce5517a8d4157aa779450f1b8ed67fb75dd34a697eddec09ee25bb641d8d53db132aa9

    • SSDEEP

      786432:u3/cI91oBjJm7QaC6v72bQgVR6uNliUqMAV7sDpE8l5:u3kIL1RCiq0gnpNCVItz

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks