General

  • Target

    BEC041D3484AACFB8322BF5C630280C0859796FF546337DF278899FC2326309D

  • Size

    1.1MB

  • Sample

    250103-jqjnbsxqen

  • MD5

    b068dff30a78224c6d605d2e7722a9ad

  • SHA1

    d03d04f392386993323f5560616d72fb63a0b184

  • SHA256

    bec041d3484aacfb8322bf5c630280c0859796ff546337df278899fc2326309d

  • SHA512

    68b946406d2cef5c35cff2a24c3a45c3031d4943a498bf185ccc819de1ed5e36e8e5398a7888744677903d2a0ea92ac0854e517e1102cf4139ab119071a0b286

  • SSDEEP

    24576:j4lavt0LkLL9IMixoEgeatiZq8EJHKCquvJyq9MmCS:2kwkn9IMHeat+uHKlTaPCS

Malware Config

Extracted

Family

redline

Botnet

success

C2

212.162.149.159:37004

Targets

    • Target

      BEC041D3484AACFB8322BF5C630280C0859796FF546337DF278899FC2326309D

    • Size

      1.1MB

    • MD5

      b068dff30a78224c6d605d2e7722a9ad

    • SHA1

      d03d04f392386993323f5560616d72fb63a0b184

    • SHA256

      bec041d3484aacfb8322bf5c630280c0859796ff546337df278899fc2326309d

    • SHA512

      68b946406d2cef5c35cff2a24c3a45c3031d4943a498bf185ccc819de1ed5e36e8e5398a7888744677903d2a0ea92ac0854e517e1102cf4139ab119071a0b286

    • SSDEEP

      24576:j4lavt0LkLL9IMixoEgeatiZq8EJHKCquvJyq9MmCS:2kwkn9IMHeat+uHKlTaPCS

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks