General

  • Target

    0x000100000002311f-157.dat

  • Size

    145KB

  • Sample

    230524-bl6cjaah9s

  • MD5

    c6e6aba26325f733f9199756892eac9b

  • SHA1

    8ada0b1dc38467eaef51ee7360224c1c7dce998a

  • SHA256

    b06c44ab3b8cdd99117816d013905fa395f67909a5d94bb0fc2ad690d0960721

  • SHA512

    fca6261678c2f0435643cae7a111a32cee489b0fe90058b6b585cfecba2abf59667250fa05709c879d908802c29a47ade8a89ec94c27d004dd4a9e944140ae46

  • SSDEEP

    3072:cV+m5c/QmRSNwIO1mn30DwaFehPZl8e8hu:cj20kDTehPP

Malware Config

Extracted

Family

redline

Botnet

diza

C2

83.97.73.122:19062

Attributes
  • auth_value

    0d09b419c8bc967f91c68be4a17e92ee

Targets

    • Target

      0x000100000002311f-157.dat

    • Size

      145KB

    • MD5

      c6e6aba26325f733f9199756892eac9b

    • SHA1

      8ada0b1dc38467eaef51ee7360224c1c7dce998a

    • SHA256

      b06c44ab3b8cdd99117816d013905fa395f67909a5d94bb0fc2ad690d0960721

    • SHA512

      fca6261678c2f0435643cae7a111a32cee489b0fe90058b6b585cfecba2abf59667250fa05709c879d908802c29a47ade8a89ec94c27d004dd4a9e944140ae46

    • SSDEEP

      3072:cV+m5c/QmRSNwIO1mn30DwaFehPZl8e8hu:cj20kDTehPP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks