General

  • Target

    757bca77537999f67244a6d7814cb827bd668d10707afbdcdcf1336cbfca8317

  • Size

    581KB

  • Sample

    230605-d5qgjaef96

  • MD5

    1a98a1ad8a1c5eef54e754b4d784f37c

  • SHA1

    ebe357feb7b98f27dbed628bcd9e0ba5cd242511

  • SHA256

    757bca77537999f67244a6d7814cb827bd668d10707afbdcdcf1336cbfca8317

  • SHA512

    8da0a758954c05df74669dc0ade857855f05136cfe87269a1b0192bbd29c5043e6df335013b5275860ed87a87a71c2f22c298b6b5c1c001b2d06fb995a0205b5

  • SSDEEP

    12288:rMrEy90r+iu551kWQmB6e9zRI4hGaRIR:Dyz551dThGMIR

Malware Config

Extracted

Family

redline

Botnet

diza

C2

83.97.73.126:19046

Attributes
  • auth_value

    0d09b419c8bc967f91c68be4a17e92ee

Targets

    • Target

      757bca77537999f67244a6d7814cb827bd668d10707afbdcdcf1336cbfca8317

    • Size

      581KB

    • MD5

      1a98a1ad8a1c5eef54e754b4d784f37c

    • SHA1

      ebe357feb7b98f27dbed628bcd9e0ba5cd242511

    • SHA256

      757bca77537999f67244a6d7814cb827bd668d10707afbdcdcf1336cbfca8317

    • SHA512

      8da0a758954c05df74669dc0ade857855f05136cfe87269a1b0192bbd29c5043e6df335013b5275860ed87a87a71c2f22c298b6b5c1c001b2d06fb995a0205b5

    • SSDEEP

      12288:rMrEy90r+iu551kWQmB6e9zRI4hGaRIR:Dyz551dThGMIR

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks