General

  • Target

    07ef0d3dc2f500f80372d200209b3023316e443fe7df34f9370cc612db5a71aa

  • Size

    3.5MB

  • Sample

    241229-x5zvrawkd1

  • MD5

    203f7b540a345cc65c1ad5d185354a3a

  • SHA1

    3b436d75534f71221f1dc7081bd799f2a378dd79

  • SHA256

    07ef0d3dc2f500f80372d200209b3023316e443fe7df34f9370cc612db5a71aa

  • SHA512

    e1a882849ea5d697318d5baa4805c3905612ef97bf5797f02729c203752bd13b784e1a3ed6f54fe783404cefa0e6532ef5865567f1c306d4be765eee42cfa8ef

  • SSDEEP

    98304:EYyujypWS7z9Ns7vek4bO6ldbRnP/9U6EbL4U:CXjsrOOEddX9UD8

Malware Config

Extracted

Family

redline

C2

5.206.227.11:63730

Attributes
  • auth_value

    0d9bdac3eaf2ab8f3967464ab95109da

Targets

    • Target

      07ef0d3dc2f500f80372d200209b3023316e443fe7df34f9370cc612db5a71aa

    • Size

      3.5MB

    • MD5

      203f7b540a345cc65c1ad5d185354a3a

    • SHA1

      3b436d75534f71221f1dc7081bd799f2a378dd79

    • SHA256

      07ef0d3dc2f500f80372d200209b3023316e443fe7df34f9370cc612db5a71aa

    • SHA512

      e1a882849ea5d697318d5baa4805c3905612ef97bf5797f02729c203752bd13b784e1a3ed6f54fe783404cefa0e6532ef5865567f1c306d4be765eee42cfa8ef

    • SSDEEP

      98304:EYyujypWS7z9Ns7vek4bO6ldbRnP/9U6EbL4U:CXjsrOOEddX9UD8

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks