General

  • Target

    RogueV6.3cracked.exe

  • Size

    13.6MB

  • Sample

    241130-tqcvwsyjfv

  • MD5

    ed475b5614b57bb769d9475bab408bb2

  • SHA1

    a4496180da8930ea4b50f6b7e08e48cf4d093a43

  • SHA256

    d4bae32272d4b78710e2546c787a5301135cdc3bbc89dde41fc32b5ff1b1374b

  • SHA512

    88842132f2a486a34b4766d4b0092856fc3313895612f8aa613914acb5d32114ee033744c473b9ab28ec5f9f3e6e31980c85139f9f7dafdc4614b67f496403ce

  • SSDEEP

    196608:/Qx1aFKgrjL4HwYJTPV+abRdGHMICWi0fNkn6zTetKvIy5nQmy:/Y1EDjL4QYJTQabRdGHvCWi0l6O+Kw

Malware Config

Extracted

Family

redline

Botnet

NOu

C2

135.236.153.9:1912

Targets

    • Target

      RogueV6.3cracked.exe

    • Size

      13.6MB

    • MD5

      ed475b5614b57bb769d9475bab408bb2

    • SHA1

      a4496180da8930ea4b50f6b7e08e48cf4d093a43

    • SHA256

      d4bae32272d4b78710e2546c787a5301135cdc3bbc89dde41fc32b5ff1b1374b

    • SHA512

      88842132f2a486a34b4766d4b0092856fc3313895612f8aa613914acb5d32114ee033744c473b9ab28ec5f9f3e6e31980c85139f9f7dafdc4614b67f496403ce

    • SSDEEP

      196608:/Qx1aFKgrjL4HwYJTPV+abRdGHMICWi0fNkn6zTetKvIy5nQmy:/Y1EDjL4QYJTQabRdGHvCWi0l6O+Kw

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Obfuscated Files or Information: Command Obfuscation

      Adversaries may obfuscate content during command execution to impede detection.

MITRE ATT&CK Enterprise v15

Tasks