General

  • Target

    Hackus.exe

  • Size

    192KB

  • Sample

    241218-y1dx6azpdt

  • MD5

    497f3d5d9e6311ff5f13297077eefb84

  • SHA1

    f5ef76d3ed07ecc21a31322541a37250f025aeb8

  • SHA256

    7faf146ad217e905ac75db6b59a569543390416a4249c569e6cec86c180f78e1

  • SHA512

    b8b893ba849cd320a1a7617dcec2666e8524b721a8450c9e24ad7a9955c2157072e21bba648391dea4ec49d803e14ddf79b820087358efeb551e9e7d097d328c

  • SSDEEP

    3072:rcZqf7D34Tp/0+mAYkygYdQ0ghnB1fA0PuTVAtkxzN3RI:rcZqf7DItnGapB1fA0GTV8kL

Malware Config

Extracted

Family

redline

Botnet

9-23h

C2

135.236.96.237:1912

Targets

    • Target

      Hackus.exe

    • Size

      192KB

    • MD5

      497f3d5d9e6311ff5f13297077eefb84

    • SHA1

      f5ef76d3ed07ecc21a31322541a37250f025aeb8

    • SHA256

      7faf146ad217e905ac75db6b59a569543390416a4249c569e6cec86c180f78e1

    • SHA512

      b8b893ba849cd320a1a7617dcec2666e8524b721a8450c9e24ad7a9955c2157072e21bba648391dea4ec49d803e14ddf79b820087358efeb551e9e7d097d328c

    • SSDEEP

      3072:rcZqf7D34Tp/0+mAYkygYdQ0ghnB1fA0PuTVAtkxzN3RI:rcZqf7DItnGapB1fA0GTV8kL

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks