General

  • Target

    launcher895.exe

  • Size

    1.0MB

  • Sample

    230522-mwcnraaf8z

  • MD5

    bff68732bea83e68b0832c4d2c0f432d

  • SHA1

    5d9d47c10a97775991a5cff9685426f765c5bf2a

  • SHA256

    f7b700c6ac554c2ec4c6fc724fbcc021753dcbdc43ba1efcff35843dd3c66c6f

  • SHA512

    f9441d3f947e8c8d5e2c23f94d3f9ce155ab78fcfab98aedb5e90ef1e4e4ead8e942108252b1944d286d664de3d60843d6570edec1a83eddfd8131a58fb86db3

  • SSDEEP

    24576:iyqaRmykAv+7S65YPzvXrhhH20Ipr5MSYr:JnmcvcLCTPtIhK

Malware Config

Extracted

Family

redline

Botnet

diza

C2

185.161.248.37:4138

Attributes
  • auth_value

    0d09b419c8bc967f91c68be4a17e92ee

Targets

    • Target

      launcher895.exe

    • Size

      1.0MB

    • MD5

      bff68732bea83e68b0832c4d2c0f432d

    • SHA1

      5d9d47c10a97775991a5cff9685426f765c5bf2a

    • SHA256

      f7b700c6ac554c2ec4c6fc724fbcc021753dcbdc43ba1efcff35843dd3c66c6f

    • SHA512

      f9441d3f947e8c8d5e2c23f94d3f9ce155ab78fcfab98aedb5e90ef1e4e4ead8e942108252b1944d286d664de3d60843d6570edec1a83eddfd8131a58fb86db3

    • SSDEEP

      24576:iyqaRmykAv+7S65YPzvXrhhH20Ipr5MSYr:JnmcvcLCTPtIhK

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks