General

  • Target
    859e64236c7d4720e0a2be0ecc3a289034b2c2ca7b136.exe
  • Size 145KB
  • Sample211130-2ntdvsghan
  • SHA256 859e64236c7d4720e0a2be0ecc3a289034b2c2ca7b136874dd6bcc649c79d8ba
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • redline

Botnet
  • cheat

C2
  • 8.tcp.ngrok.io:12736

Targets

    • Target
      859e64236c7d4720e0a2be0ecc3a289034b2c2ca7b136.exe
    • Size 145KB
    • SHA256 859e64236c7d4720e0a2be0ecc3a289034b2c2ca7b136874dd6bcc649c79d8ba
    • MD5 SHA1 SHA512
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine Payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks