General

  • Target

    build.exe

  • Size

    300KB

  • Sample

    240701-vtnx1azdpe

  • MD5

    974e76d4b0ddb3706cf174819d200516

  • SHA1

    817b8c7fb6be6a2cff1d8ac17a24a0c2f257f97b

  • SHA256

    d60599eb61f2653e184831a7086cdaa3195fd6845f6b57acb4b319deb46c5af8

  • SHA512

    9f9b8c9acbde28c9adce8ce1429e2182de0eae970f60267e2f2f0f5f498955a3f90f476d722a15b7f9c53229540906002ce8d8bd697f70591bd86495708a0212

  • SSDEEP

    3072:6cZqf7D34Wp/0+mAUkyw/GQEgzwB1fA0PuTVAtkxzV3RseqiOL2bBOA:6cZqf7DIunh9oB1fA0GTV8kjUL

Malware Config

Extracted

Family

redline

Botnet

test

C2

people-climbing.gl.at.ply.gg:54251

Targets

    • Target

      build.exe

    • Size

      300KB

    • MD5

      974e76d4b0ddb3706cf174819d200516

    • SHA1

      817b8c7fb6be6a2cff1d8ac17a24a0c2f257f97b

    • SHA256

      d60599eb61f2653e184831a7086cdaa3195fd6845f6b57acb4b319deb46c5af8

    • SHA512

      9f9b8c9acbde28c9adce8ce1429e2182de0eae970f60267e2f2f0f5f498955a3f90f476d722a15b7f9c53229540906002ce8d8bd697f70591bd86495708a0212

    • SSDEEP

      3072:6cZqf7D34Wp/0+mAUkyw/GQEgzwB1fA0PuTVAtkxzV3RseqiOL2bBOA:6cZqf7DIunh9oB1fA0GTV8kjUL

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks