General

  • Target

    72d7e0b33b1bbbe20c776479429a273fd8e9f9e659aa55936344bb36848d4172

  • Size

    1.0MB

  • Sample

    230522-e382jaea69

  • MD5

    b0f335aa1dc7ece31eb432576876cf14

  • SHA1

    ea85702e5ea01347797c25adeb80f6464b9988d4

  • SHA256

    72d7e0b33b1bbbe20c776479429a273fd8e9f9e659aa55936344bb36848d4172

  • SHA512

    37da2e35b59eb4f24506bd6b995af3afef8d328445e21101c04f908fba44260720812a151dfbb078def8c135975326dd0ed548f0161e6955e4df8162f9fc1f51

  • SSDEEP

    24576:LyXKL2WLjauI1cF3oRKYquFp/vhiDTgufPTRiJUY:+XK3LjaV1ccMuF1yfPTM

Malware Config

Extracted

Family

redline

Botnet

diza

C2

185.161.248.37:4138

Attributes
  • auth_value

    0d09b419c8bc967f91c68be4a17e92ee

Targets

    • Target

      72d7e0b33b1bbbe20c776479429a273fd8e9f9e659aa55936344bb36848d4172

    • Size

      1.0MB

    • MD5

      b0f335aa1dc7ece31eb432576876cf14

    • SHA1

      ea85702e5ea01347797c25adeb80f6464b9988d4

    • SHA256

      72d7e0b33b1bbbe20c776479429a273fd8e9f9e659aa55936344bb36848d4172

    • SHA512

      37da2e35b59eb4f24506bd6b995af3afef8d328445e21101c04f908fba44260720812a151dfbb078def8c135975326dd0ed548f0161e6955e4df8162f9fc1f51

    • SSDEEP

      24576:LyXKL2WLjauI1cF3oRKYquFp/vhiDTgufPTRiJUY:+XK3LjaV1ccMuF1yfPTM

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks