General

  • Target

    Setup.exe

  • Size

    766KB

  • Sample

    250112-3vrdhsvpgx

  • MD5

    3a2edcc08db323bcb54a4b7dd3064c93

  • SHA1

    40ee8e516f21720335e4e01e471471044a2f94ff

  • SHA256

    c44b939c90c4a2532cf72c111ac8afd762661703a4e220f1c605bf71a66b2829

  • SHA512

    040997f3b968a46920e9ef611a309eceadcb7e904be8f0ca94870213a5fbff4217c41820deee76062d3cc04b0a3643bb752c0b9bf7b1d53fd9c23914d4ecd4ad

  • SSDEEP

    12288:9M21Of9dQUbkKevTfdEGDXicZ6SXntq6YQCtcKqrapU3Vg7cQ9oGa1ZFt:m2QvmtScZLW6aGVg4Qha17

Malware Config

Extracted

Family

redline

C2

45.15.157.131:36457

Attributes
  • auth_value

    0b1c7aa3f8d9eb1607fd8100272acb83

Targets

    • Target

      Setup.exe

    • Size

      766KB

    • MD5

      3a2edcc08db323bcb54a4b7dd3064c93

    • SHA1

      40ee8e516f21720335e4e01e471471044a2f94ff

    • SHA256

      c44b939c90c4a2532cf72c111ac8afd762661703a4e220f1c605bf71a66b2829

    • SHA512

      040997f3b968a46920e9ef611a309eceadcb7e904be8f0ca94870213a5fbff4217c41820deee76062d3cc04b0a3643bb752c0b9bf7b1d53fd9c23914d4ecd4ad

    • SSDEEP

      12288:9M21Of9dQUbkKevTfdEGDXicZ6SXntq6YQCtcKqrapU3Vg7cQ9oGa1ZFt:m2QvmtScZLW6aGVg4Qha17

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks