General

  • Target

    Aer0 Spoofer - Stable .exe

  • Size

    104KB

  • Sample

    250105-gavdsawkgm

  • MD5

    c590e3a406fd59d4a8c7f1ce53405931

  • SHA1

    2a8b989f264ea650ca8ddf3287c65ca86ae274a0

  • SHA256

    88005be6c7e541d6933b6dfdf8cbfc318df08ba13caf16bc4dd46e87edb09b37

  • SHA512

    2c3f9855919a069da043e843dc85d603c1df672923026d1a53138f060314c5e9fbd10d79bccc6663bd29bfc924d93659e42b61c19691692eb5ddb61639278df2

  • SSDEEP

    3072:1OZk6sAbLjlp5q8uE0/PyOk7mfnPVeIJvwj7:1NwbLjlp5q8udy6VOX

Malware Config

Extracted

Family

redline

Botnet

@Yuki4onna

C2

188.124.37.219:26360

Attributes
  • auth_value

    a797101ee49e671712f69e8c73bded51

Targets

    • Target

      Aer0 Spoofer - Stable .exe

    • Size

      104KB

    • MD5

      c590e3a406fd59d4a8c7f1ce53405931

    • SHA1

      2a8b989f264ea650ca8ddf3287c65ca86ae274a0

    • SHA256

      88005be6c7e541d6933b6dfdf8cbfc318df08ba13caf16bc4dd46e87edb09b37

    • SHA512

      2c3f9855919a069da043e843dc85d603c1df672923026d1a53138f060314c5e9fbd10d79bccc6663bd29bfc924d93659e42b61c19691692eb5ddb61639278df2

    • SSDEEP

      3072:1OZk6sAbLjlp5q8uE0/PyOk7mfnPVeIJvwj7:1NwbLjlp5q8udy6VOX

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks