General

  • Target

    2d38fac7d02a4d32b8579c25ec1ce2d6bb14bc27d846874ad6f1897ca21889cd.exe

  • Size

    770KB

  • Sample

    250111-c9affasnhr

  • MD5

    8b2612c44a0951e150dc47ba2741d26e

  • SHA1

    0d5a4030a841a8a77c130f6689712e24aaa9a674

  • SHA256

    2d38fac7d02a4d32b8579c25ec1ce2d6bb14bc27d846874ad6f1897ca21889cd

  • SHA512

    87052019e30f961c6a77889e789f246d1c529834c90122f3c3a781ee58b519db311b31f36309ae2e56706ccc2a0e34b545ddb054d9fc5cf81700e1c76510387e

  • SSDEEP

    12288:uIR4R52J+XtLKxw9rbrramF93MFTzEiBBs/iTxAKnAHORfoO9FHF9jD7Qx1MxQh:uIeew9rbKmF93MxzRTqKnYOBvHPO

Malware Config

Extracted

Family

redline

Botnet

LOGS

C2

87.120.120.86:1912

Targets

    • Target

      2d38fac7d02a4d32b8579c25ec1ce2d6bb14bc27d846874ad6f1897ca21889cd.exe

    • Size

      770KB

    • MD5

      8b2612c44a0951e150dc47ba2741d26e

    • SHA1

      0d5a4030a841a8a77c130f6689712e24aaa9a674

    • SHA256

      2d38fac7d02a4d32b8579c25ec1ce2d6bb14bc27d846874ad6f1897ca21889cd

    • SHA512

      87052019e30f961c6a77889e789f246d1c529834c90122f3c3a781ee58b519db311b31f36309ae2e56706ccc2a0e34b545ddb054d9fc5cf81700e1c76510387e

    • SSDEEP

      12288:uIR4R52J+XtLKxw9rbrramF93MFTzEiBBs/iTxAKnAHORfoO9FHF9jD7Qx1MxQh:uIeew9rbKmF93MxzRTqKnYOBvHPO

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks