General

  • Target

    167958214a4176abc040094d03625afef5becf58f3f847905ab9fc225e94cb41

  • Size

    579KB

  • Sample

    230605-h2q14sfc86

  • MD5

    057d3c81e496ba17ea206b7ce0ad3328

  • SHA1

    b7006db46cb203d37042b0f164b9e69ca37659a8

  • SHA256

    167958214a4176abc040094d03625afef5becf58f3f847905ab9fc225e94cb41

  • SHA512

    bc1dfc056f0e30f0257249a30614323f558e0e60120b42a7642849f608f11187ad1bd4ecb3463620671317720b0a9a22fc4e76e5adf983a44ba83c8270284866

  • SSDEEP

    12288:/MrWy90BHdOOGD9vwjC7DfNzhQOYfx6f0b7z5vW1TSpCS:Fy2dtStNOj6f0/z5e1KB

Malware Config

Extracted

Family

redline

Botnet

diza

C2

83.97.73.126:19046

Attributes
  • auth_value

    0d09b419c8bc967f91c68be4a17e92ee

Targets

    • Target

      167958214a4176abc040094d03625afef5becf58f3f847905ab9fc225e94cb41

    • Size

      579KB

    • MD5

      057d3c81e496ba17ea206b7ce0ad3328

    • SHA1

      b7006db46cb203d37042b0f164b9e69ca37659a8

    • SHA256

      167958214a4176abc040094d03625afef5becf58f3f847905ab9fc225e94cb41

    • SHA512

      bc1dfc056f0e30f0257249a30614323f558e0e60120b42a7642849f608f11187ad1bd4ecb3463620671317720b0a9a22fc4e76e5adf983a44ba83c8270284866

    • SSDEEP

      12288:/MrWy90BHdOOGD9vwjC7DfNzhQOYfx6f0b7z5vW1TSpCS:Fy2dtStNOj6f0/z5e1KB

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks