General

  • Target

    da295753d3fbca1691b189acf1d856cbb3af5f91f1ca4d4679f6c67366079481.exe

  • Size

    744KB

  • Sample

    250110-snkx2szrbp

  • MD5

    b2f248a5956e162c72b57bd30299812a

  • SHA1

    52be3af077d32b54f6a84dc77ca8d787a9b6be55

  • SHA256

    da295753d3fbca1691b189acf1d856cbb3af5f91f1ca4d4679f6c67366079481

  • SHA512

    7b7389dce19d3813b8b8676513ba004518a9624a3b7867c7e96ee8449cc7d1f3bcb42416eccb6ea73856679fb1ffe240ae42cab7f55c4fef31eb084083ebea63

  • SSDEEP

    12288:uk9A55OHTDP7x2bBs0RJXqTIq/fEpBKNzSQVBpbeX7OrGp71H+m1RP7z0:NAXOP7xkbNqTIqfD9PVBpbZOkm1

Malware Config

Extracted

Family

redline

Botnet

BOT

C2

87.120.120.7:1912

Targets

    • Target

      da295753d3fbca1691b189acf1d856cbb3af5f91f1ca4d4679f6c67366079481.exe

    • Size

      744KB

    • MD5

      b2f248a5956e162c72b57bd30299812a

    • SHA1

      52be3af077d32b54f6a84dc77ca8d787a9b6be55

    • SHA256

      da295753d3fbca1691b189acf1d856cbb3af5f91f1ca4d4679f6c67366079481

    • SHA512

      7b7389dce19d3813b8b8676513ba004518a9624a3b7867c7e96ee8449cc7d1f3bcb42416eccb6ea73856679fb1ffe240ae42cab7f55c4fef31eb084083ebea63

    • SSDEEP

      12288:uk9A55OHTDP7x2bBs0RJXqTIq/fEpBKNzSQVBpbeX7OrGp71H+m1RP7z0:NAXOP7xkbNqTIqfD9PVBpbZOkm1

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks