General

  • Target

    0766e43d3968a048e78c18383353ea6450934bcd0427ec9757c8da2570884580.exe

  • Size

    826KB

  • Sample

    250110-r789baxnbv

  • MD5

    223342da9548abad8b253b0918baffd1

  • SHA1

    9d1dfe8772a94721f3aaeef0077dd867987973f9

  • SHA256

    0766e43d3968a048e78c18383353ea6450934bcd0427ec9757c8da2570884580

  • SHA512

    e655ffeb9b63bbab56b8bd7246fe6ace7e4235e86950c8a673340ad2ab99d841b75328671a6f314e63d5b181f8b38870fb6a6e5d9ae28a6d3fe6e0c9a01c0289

  • SSDEEP

    12288:C88f2uE1zDYj657DjU2HAu4TjYMJ5Q0PepO/lJhaFv3Ji6L8cUK:C8u2uOC6pDjU2HAu6YGQ3wJhwvxPU

Malware Config

Extracted

Family

redline

Botnet

LOGS

C2

87.120.120.86:1912

Targets

    • Target

      0766e43d3968a048e78c18383353ea6450934bcd0427ec9757c8da2570884580.exe

    • Size

      826KB

    • MD5

      223342da9548abad8b253b0918baffd1

    • SHA1

      9d1dfe8772a94721f3aaeef0077dd867987973f9

    • SHA256

      0766e43d3968a048e78c18383353ea6450934bcd0427ec9757c8da2570884580

    • SHA512

      e655ffeb9b63bbab56b8bd7246fe6ace7e4235e86950c8a673340ad2ab99d841b75328671a6f314e63d5b181f8b38870fb6a6e5d9ae28a6d3fe6e0c9a01c0289

    • SSDEEP

      12288:C88f2uE1zDYj657DjU2HAu4TjYMJ5Q0PepO/lJhaFv3Ji6L8cUK:C8u2uOC6pDjU2HAu6YGQ3wJhwvxPU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks