General

  • Target

    e844c45831ec146a5c82479c1381a32827034b11078e433870006e40ea13cf15.exe

  • Size

    776KB

  • Sample

    250110-sb8tcaznhm

  • MD5

    a5f1d2b0754206f99ad204434058f29d

  • SHA1

    4741635dd9f9839771ee8d5c37a0270b5f3149f6

  • SHA256

    e844c45831ec146a5c82479c1381a32827034b11078e433870006e40ea13cf15

  • SHA512

    4ff320f9ebe550d20649d2e42a5cb58be6bf9ddf75a3c73a3840574b7b972bf56b07a578a9075812c28aca91f6fefa93492cffec7e3597cf1393cc487fc5937f

  • SSDEEP

    12288:3WASwBlF55OHTDPEZcq7fh2KFL/2geR2C0fteSU9WNBpjhi/P:3Z/FXOP2hpUMCQjXpjhi

Malware Config

Extracted

Family

redline

Botnet

LOGS

C2

87.120.120.86:1912

Targets

    • Target

      e844c45831ec146a5c82479c1381a32827034b11078e433870006e40ea13cf15.exe

    • Size

      776KB

    • MD5

      a5f1d2b0754206f99ad204434058f29d

    • SHA1

      4741635dd9f9839771ee8d5c37a0270b5f3149f6

    • SHA256

      e844c45831ec146a5c82479c1381a32827034b11078e433870006e40ea13cf15

    • SHA512

      4ff320f9ebe550d20649d2e42a5cb58be6bf9ddf75a3c73a3840574b7b972bf56b07a578a9075812c28aca91f6fefa93492cffec7e3597cf1393cc487fc5937f

    • SSDEEP

      12288:3WASwBlF55OHTDPEZcq7fh2KFL/2geR2C0fteSU9WNBpjhi/P:3Z/FXOP2hpUMCQjXpjhi

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks