General

  • Target

    12887071f0bbba92ce818f6e06da06e373f58c0300a58915a84e505ef78f16f9

  • Size

    751KB

  • Sample

    230601-aah77abf53

  • MD5

    fe79a74f03af7dbae1f762b8809f5b83

  • SHA1

    3087164d75c90daffa167a3972c017a389651823

  • SHA256

    12887071f0bbba92ce818f6e06da06e373f58c0300a58915a84e505ef78f16f9

  • SHA512

    6f94e8e2c6b5e1f5cf75349d7cff280586e32b2990215d9d136908e3ea902dd896c30e07e19922937677d7fddeff37b9602881fa3f399ae94f2ad04cc29a4cc3

  • SSDEEP

    12288:iMrty90hvZoi1L0dq8Lj0TaA5Cu9naMuXxwXU0vD+z6wwOlsSObydzhOcBOibG:Xya+C0d1j0TaA5XVaMuX6Xjy/wjSOby+

Malware Config

Extracted

Family

redline

Botnet

diza

C2

83.97.73.127:19045

Attributes
  • auth_value

    0d09b419c8bc967f91c68be4a17e92ee

Targets

    • Target

      12887071f0bbba92ce818f6e06da06e373f58c0300a58915a84e505ef78f16f9

    • Size

      751KB

    • MD5

      fe79a74f03af7dbae1f762b8809f5b83

    • SHA1

      3087164d75c90daffa167a3972c017a389651823

    • SHA256

      12887071f0bbba92ce818f6e06da06e373f58c0300a58915a84e505ef78f16f9

    • SHA512

      6f94e8e2c6b5e1f5cf75349d7cff280586e32b2990215d9d136908e3ea902dd896c30e07e19922937677d7fddeff37b9602881fa3f399ae94f2ad04cc29a4cc3

    • SSDEEP

      12288:iMrty90hvZoi1L0dq8Lj0TaA5Cu9naMuXxwXU0vD+z6wwOlsSObydzhOcBOibG:Xya+C0d1j0TaA5XVaMuX6Xjy/wjSOby+

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks