General

  • Target

    e14cf1238643d04a93157a0416329f7f8b08a9ceff996b870be593df328d6953.exe

  • Size

    852KB

  • Sample

    250110-r6lrmaxmfs

  • MD5

    1cd6afe88ba532ca70c927d90314eac8

  • SHA1

    3e5c107a20bad54a81ec0cb7e18e4dddcfca003b

  • SHA256

    e14cf1238643d04a93157a0416329f7f8b08a9ceff996b870be593df328d6953

  • SHA512

    d338745cc39ad49e6d94251d2bbc2dc2c2af77ee37fe4fd952ea765a3159e45adb2da316fab36a2f39344d87ed37c0eac91a4f1026e5c31936f38e7a28f2d3bd

  • SSDEEP

    24576:yuxXOKVpvO/cmyGMELxcPZrUm/t3rwFO:rxXdfOEOM6SPtUCQ

Malware Config

Extracted

Family

redline

Botnet

LOGS

C2

87.120.120.86:1912

Targets

    • Target

      e14cf1238643d04a93157a0416329f7f8b08a9ceff996b870be593df328d6953.exe

    • Size

      852KB

    • MD5

      1cd6afe88ba532ca70c927d90314eac8

    • SHA1

      3e5c107a20bad54a81ec0cb7e18e4dddcfca003b

    • SHA256

      e14cf1238643d04a93157a0416329f7f8b08a9ceff996b870be593df328d6953

    • SHA512

      d338745cc39ad49e6d94251d2bbc2dc2c2af77ee37fe4fd952ea765a3159e45adb2da316fab36a2f39344d87ed37c0eac91a4f1026e5c31936f38e7a28f2d3bd

    • SSDEEP

      24576:yuxXOKVpvO/cmyGMELxcPZrUm/t3rwFO:rxXdfOEOM6SPtUCQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks