General

  • Target

    2b5ceb18f10606859253493d936ae2815b3fed26.exe

  • Size

    647KB

  • Sample

    241231-rbjzjstlby

  • MD5

    ac39e7b10284fe04e5bdb8b588681cb4

  • SHA1

    2b5ceb18f10606859253493d936ae2815b3fed26

  • SHA256

    fc7da967f86d24024700aa2a488ae2ce18c038260d9e2d5067261c9bedbcfaf0

  • SHA512

    0fbff528fe6962f4695be585e8a666af8d4576d75cf37d20e95658e7b1d81bebc0e308b7c4032be139768b077b08e19ed9d474d04a87c0609bac04258ccde809

  • SSDEEP

    12288:tHQNnEONUb9/6VQBDthHcUzsMyl2zkoF:tqnEldUUfyl2z

Malware Config

Extracted

Family

redline

C2

185.38.142.167:6302

Targets

    • Target

      2b5ceb18f10606859253493d936ae2815b3fed26.exe

    • Size

      647KB

    • MD5

      ac39e7b10284fe04e5bdb8b588681cb4

    • SHA1

      2b5ceb18f10606859253493d936ae2815b3fed26

    • SHA256

      fc7da967f86d24024700aa2a488ae2ce18c038260d9e2d5067261c9bedbcfaf0

    • SHA512

      0fbff528fe6962f4695be585e8a666af8d4576d75cf37d20e95658e7b1d81bebc0e308b7c4032be139768b077b08e19ed9d474d04a87c0609bac04258ccde809

    • SSDEEP

      12288:tHQNnEONUb9/6VQBDthHcUzsMyl2zkoF:tqnEldUUfyl2z

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks