General

  • Target

    0x000600000001435e-115.dat

  • Size

    145KB

  • Sample

    230523-l6x7rsff7v

  • MD5

    9fcb62a13d2a94d228072ea5d032d7d2

  • SHA1

    59ad78c2b5b8e00ecc6f3b3f329ec894c1f20f75

  • SHA256

    31d32ef916cf4516ea3333070e1f2a438d2cf4c10348d84d2c29e4c245136fae

  • SHA512

    79d4fc4b9c35926dc4fcf959c3586185bd5c5a39e96f0903887e0593739154bbb6cbace30e5c47851a9acc200b0e4eaf9d6a4351a9724bc2b890816e372dd84a

  • SSDEEP

    3072:pV+m5cVQmRSxRGAFiXAgmpajhhuZO8e8hWGn:pj4giNXjhhuE

Malware Config

Extracted

Family

redline

Botnet

daza

C2

77.91.124.251:19065

Attributes
  • auth_value

    0bd5963efefdd6409185423d5ca3439c

Targets

    • Target

      0x000600000001435e-115.dat

    • Size

      145KB

    • MD5

      9fcb62a13d2a94d228072ea5d032d7d2

    • SHA1

      59ad78c2b5b8e00ecc6f3b3f329ec894c1f20f75

    • SHA256

      31d32ef916cf4516ea3333070e1f2a438d2cf4c10348d84d2c29e4c245136fae

    • SHA512

      79d4fc4b9c35926dc4fcf959c3586185bd5c5a39e96f0903887e0593739154bbb6cbace30e5c47851a9acc200b0e4eaf9d6a4351a9724bc2b890816e372dd84a

    • SSDEEP

      3072:pV+m5cVQmRSxRGAFiXAgmpajhhuZO8e8hWGn:pj4giNXjhhuE

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks