General

  • Target

    b7a46b6c3fd98866134d8a5831a82b7444c0c2d5fe6692adfab92051e3541c7f

  • Size

    396KB

  • Sample

    241201-yexs5svjfl

  • MD5

    8c3e7b6b72018052253153eeac5d10a2

  • SHA1

    e71b4799ace996616f042f3ee5d6d32418f8c687

  • SHA256

    b7a46b6c3fd98866134d8a5831a82b7444c0c2d5fe6692adfab92051e3541c7f

  • SHA512

    b0d48769f4db4eb4db9c5302ed6fc753cca5b0fa4f88e55345077a92092b8af71e92ce5d69608d05cc4cbf9ee566661035314ae0df9fd18332ab9df6f3c479da

  • SSDEEP

    6144:vK4zpQJTuer7D8PX6Jzgw61RKjWMw376FZKWAlBCqf670vb06WgGZqb5loqQr:vPXuD8PX261RKuc4UqfwD6zMqU

Malware Config

Extracted

Family

redline

Botnet

work28.7

C2

194.33.191.102:21751

Targets

    • Target

      b7a46b6c3fd98866134d8a5831a82b7444c0c2d5fe6692adfab92051e3541c7f

    • Size

      396KB

    • MD5

      8c3e7b6b72018052253153eeac5d10a2

    • SHA1

      e71b4799ace996616f042f3ee5d6d32418f8c687

    • SHA256

      b7a46b6c3fd98866134d8a5831a82b7444c0c2d5fe6692adfab92051e3541c7f

    • SHA512

      b0d48769f4db4eb4db9c5302ed6fc753cca5b0fa4f88e55345077a92092b8af71e92ce5d69608d05cc4cbf9ee566661035314ae0df9fd18332ab9df6f3c479da

    • SSDEEP

      6144:vK4zpQJTuer7D8PX6Jzgw61RKjWMw376FZKWAlBCqf670vb06WgGZqb5loqQr:vPXuD8PX261RKuc4UqfwD6zMqU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks