General

  • Target

    7b6bdec3178f0c00645c420142f2d05ba164312cef20c773c19e44ac26c071aa

  • Size

    581KB

  • Sample

    230605-efgnrsfc5y

  • MD5

    b067f64455dadca2127edc2040aa871f

  • SHA1

    57bc666f009cddd57e280769b78a069cb66e4aaf

  • SHA256

    7b6bdec3178f0c00645c420142f2d05ba164312cef20c773c19e44ac26c071aa

  • SHA512

    0933c2ef546f4bde540a7e9c058a712367cdfcb02593412dc621192089c5f36314306ee375e7c1af0f5ce12ba59d204b3436f96830251d1c1fc58c4f6575ddfc

  • SSDEEP

    12288:eMrqy90e8M793DTUzaRGTWd+qTknY239+IXTdnZRnQ:4yL8MJzTU83vknY23oE1Q

Malware Config

Extracted

Family

redline

Botnet

diza

C2

83.97.73.126:19046

Attributes
  • auth_value

    0d09b419c8bc967f91c68be4a17e92ee

Targets

    • Target

      7b6bdec3178f0c00645c420142f2d05ba164312cef20c773c19e44ac26c071aa

    • Size

      581KB

    • MD5

      b067f64455dadca2127edc2040aa871f

    • SHA1

      57bc666f009cddd57e280769b78a069cb66e4aaf

    • SHA256

      7b6bdec3178f0c00645c420142f2d05ba164312cef20c773c19e44ac26c071aa

    • SHA512

      0933c2ef546f4bde540a7e9c058a712367cdfcb02593412dc621192089c5f36314306ee375e7c1af0f5ce12ba59d204b3436f96830251d1c1fc58c4f6575ddfc

    • SSDEEP

      12288:eMrqy90e8M793DTUzaRGTWd+qTknY239+IXTdnZRnQ:4yL8MJzTU83vknY23oE1Q

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks