General

  • Target

    build.exe

  • Size

    300KB

  • Sample

    250317-hcgq5ssyfy

  • MD5

    b48d197ae3b98530b79fd73bba911b3f

  • SHA1

    3107ecbbc4e0452e412a7aa6d620f4e879755171

  • SHA256

    bcf1359a1060b4ea7314078de056e39c917f692df3220354ace53adbe527e5af

  • SHA512

    5b4a5a5625513547bcc9c7dd13a1da88dc9bc9d48b5001b0903312eb37070226e64e8f40f24183ca409fcd9cc2dc7e9e65dfd367d39dbe9acea3c17592c8653f

  • SSDEEP

    3072:KcZqf7D34rp/0+mAokyOp/wQkg6EB1fA0PuTVAtkxzO3RceqiOL2bBOA:KcZqf7DI1nHJDbB1fA0GTV8kEkL

Malware Config

Extracted

Family

redline

Botnet

1

C2

love-illegal.gl.at.ply.gg:65033

Targets

    • Target

      build.exe

    • Size

      300KB

    • MD5

      b48d197ae3b98530b79fd73bba911b3f

    • SHA1

      3107ecbbc4e0452e412a7aa6d620f4e879755171

    • SHA256

      bcf1359a1060b4ea7314078de056e39c917f692df3220354ace53adbe527e5af

    • SHA512

      5b4a5a5625513547bcc9c7dd13a1da88dc9bc9d48b5001b0903312eb37070226e64e8f40f24183ca409fcd9cc2dc7e9e65dfd367d39dbe9acea3c17592c8653f

    • SSDEEP

      3072:KcZqf7D34rp/0+mAokyOp/wQkg6EB1fA0PuTVAtkxzO3RceqiOL2bBOA:KcZqf7DI1nHJDbB1fA0GTV8kEkL

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks