General

  • Target

    7669eecbacfb3cc798bfa332eba83df9e82cc44d2f283207cdab333b732933af

  • Size

    1.0MB

  • Sample

    230523-ffckgsef8t

  • MD5

    06318fc844c1a651c676936d83a63493

  • SHA1

    d9b6e2623f3ab4f63e00601df58b826f490eafce

  • SHA256

    7669eecbacfb3cc798bfa332eba83df9e82cc44d2f283207cdab333b732933af

  • SHA512

    ad6dfb452970a299a26fb25dd329605260b499bbd7c946ca63fd1ecc96f54f347e7b9232376b974f85052ab1d7db0bd42d1799a2bf30cfcf46c86fe8842e5d31

  • SSDEEP

    24576:Ny4PdtC1I5OOwbx5E84bpzjFIRlm1ry9nbobyW46BOLTM:oMKcOOU5E5pcnEt46BOLT

Malware Config

Extracted

Family

redline

Botnet

daza

C2

77.91.124.251:19065

Attributes
  • auth_value

    0bd5963efefdd6409185423d5ca3439c

Targets

    • Target

      7669eecbacfb3cc798bfa332eba83df9e82cc44d2f283207cdab333b732933af

    • Size

      1.0MB

    • MD5

      06318fc844c1a651c676936d83a63493

    • SHA1

      d9b6e2623f3ab4f63e00601df58b826f490eafce

    • SHA256

      7669eecbacfb3cc798bfa332eba83df9e82cc44d2f283207cdab333b732933af

    • SHA512

      ad6dfb452970a299a26fb25dd329605260b499bbd7c946ca63fd1ecc96f54f347e7b9232376b974f85052ab1d7db0bd42d1799a2bf30cfcf46c86fe8842e5d31

    • SSDEEP

      24576:Ny4PdtC1I5OOwbx5E84bpzjFIRlm1ry9nbobyW46BOLTM:oMKcOOU5E5pcnEt46BOLT

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks