General

  • Target

    a182eaf8492bd08733490d4789d6880e10b70540fa4120fb313cbe43fc0a6fb1

  • Size

    580KB

  • Sample

    230605-gndm7afa82

  • MD5

    946ff1199ac6e88b6ed08ad159c0281a

  • SHA1

    27ac44d31dbfa78b03dbbb51bb4010e1a98af338

  • SHA256

    a182eaf8492bd08733490d4789d6880e10b70540fa4120fb313cbe43fc0a6fb1

  • SHA512

    8ef7f960fa37e2d79519b2b5aee757b2414e990ca3177957bf53d7ee628e5198b101872ce2bfb720aa5c7fef408df97c391e11d1fd263ef19e0ec7753454796e

  • SSDEEP

    12288:fMrmy90f6ExkluLqmfL1wjcsPjgo0N1rC:Vyw/klCT1wjPgo0N1rC

Malware Config

Extracted

Family

redline

Botnet

diza

C2

83.97.73.126:19046

Attributes
  • auth_value

    0d09b419c8bc967f91c68be4a17e92ee

Targets

    • Target

      a182eaf8492bd08733490d4789d6880e10b70540fa4120fb313cbe43fc0a6fb1

    • Size

      580KB

    • MD5

      946ff1199ac6e88b6ed08ad159c0281a

    • SHA1

      27ac44d31dbfa78b03dbbb51bb4010e1a98af338

    • SHA256

      a182eaf8492bd08733490d4789d6880e10b70540fa4120fb313cbe43fc0a6fb1

    • SHA512

      8ef7f960fa37e2d79519b2b5aee757b2414e990ca3177957bf53d7ee628e5198b101872ce2bfb720aa5c7fef408df97c391e11d1fd263ef19e0ec7753454796e

    • SSDEEP

      12288:fMrmy90f6ExkluLqmfL1wjcsPjgo0N1rC:Vyw/klCT1wjPgo0N1rC

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks