General

  • Target

    0x000600000001af04-180.dat

  • Size

    145KB

  • Sample

    230519-myxrpsdd42

  • MD5

    c38d5e7db1667f8d55fbbc2ecb41f76a

  • SHA1

    6386841710e2c3f4020c30b89bfb2eedc2015d95

  • SHA256

    7e53171ba52db52945e1aaf352b2fee6aa126c583869d3cfd3d05d6dcce8ac0b

  • SHA512

    3397327bc5e70db7cc70165053c3bda2be919839d883bd50e9547e5efee762b68846c97e75c1ad6d990c5c76454b8456e205f29821fe4608a1ea7d8106b3a955

  • SSDEEP

    3072:PV+m5chQmRSZQ1avem1eJwfUuMyNiOhjZR8e8hX:PjENURTIOhj7

Malware Config

Extracted

Family

redline

Botnet

muser

C2

77.91.68.253:19065

Attributes
  • auth_value

    ab307a8e027ba1296455e3d548f168a3

Targets

    • Target

      0x000600000001af04-180.dat

    • Size

      145KB

    • MD5

      c38d5e7db1667f8d55fbbc2ecb41f76a

    • SHA1

      6386841710e2c3f4020c30b89bfb2eedc2015d95

    • SHA256

      7e53171ba52db52945e1aaf352b2fee6aa126c583869d3cfd3d05d6dcce8ac0b

    • SHA512

      3397327bc5e70db7cc70165053c3bda2be919839d883bd50e9547e5efee762b68846c97e75c1ad6d990c5c76454b8456e205f29821fe4608a1ea7d8106b3a955

    • SSDEEP

      3072:PV+m5chQmRSZQ1avem1eJwfUuMyNiOhjZR8e8hX:PjENURTIOhj7

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks