General

  • Target

    AppLaunch.exe

  • Size

    104KB

  • Sample

    240701-d51mhaycjl

  • MD5

    006e7666628653086226ca1203d4db8f

  • SHA1

    ab37c0fb698f4d316260910f21f5a498bd359db1

  • SHA256

    b1b0137a9e18491dfae75e3921a47945a323486a6c9785ea050abcb2dc33e604

  • SHA512

    52afaa8181c53a2bd6db78bd97c38dea027c05214c1d841aab2ba274995c346bebf4f198c401af973b648ea8e856aba87ad1ad805fbdf91a79fb83fddbdfc072

  • SSDEEP

    1536:mh+zCvsP0XDcbYInTDEVgrj0y8WcWZWpVrR7lQSCbR2zbuMZEYCm+0wuei6ZLoD:rCvsP0XgUInt+SqVrR7l+eSrm+h/xP

Score
10/10

Malware Config

Extracted

Family

redline

C2

1.2.3.4:5678

Attributes
  • auth_value

    8b8bd0cb6300e0dea786123a0853916a

Targets

    • Target

      AppLaunch.exe

    • Size

      104KB

    • MD5

      006e7666628653086226ca1203d4db8f

    • SHA1

      ab37c0fb698f4d316260910f21f5a498bd359db1

    • SHA256

      b1b0137a9e18491dfae75e3921a47945a323486a6c9785ea050abcb2dc33e604

    • SHA512

      52afaa8181c53a2bd6db78bd97c38dea027c05214c1d841aab2ba274995c346bebf4f198c401af973b648ea8e856aba87ad1ad805fbdf91a79fb83fddbdfc072

    • SSDEEP

      1536:mh+zCvsP0XDcbYInTDEVgrj0y8WcWZWpVrR7lQSCbR2zbuMZEYCm+0wuei6ZLoD:rCvsP0XgUInt+SqVrR7l+eSrm+h/xP

    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks