General

  • Target

    0x000700000001271d-83.dat

  • Size

    172KB

  • Sample

    230605-n62w3age22

  • MD5

    1e00cf57d83b47756bcbdb8e50daf4c2

  • SHA1

    f24843a07d70d6324858ac6bf500d80e1462cadd

  • SHA256

    54375f73c1bdc35ee69c07db3f8594fa77a03193d44d868e18da491c5209e4ea

  • SHA512

    6b8011c59d52617e1118f67edfb74fa596fd7bc0ee6d001e4c82add4473ebb0063c848ccae46cbb47acad1f7e6bcd260598133d595e580b00e0706b6a845f64b

  • SSDEEP

    1536:6cyplTW36sv0W7TqrJmrHC+o1DWxFRIQrPvu+xNjkYQH3buI61dB7Z20GkRU8e8U:CpxgOIYSxVrPvu+xNnCU1D7Z2X8e8hi

Malware Config

Extracted

Family

redline

Botnet

lupa

C2

83.97.73.126:19046

Attributes
  • auth_value

    6a764aa41830c77712442516d143bc9c

Targets

    • Target

      0x000700000001271d-83.dat

    • Size

      172KB

    • MD5

      1e00cf57d83b47756bcbdb8e50daf4c2

    • SHA1

      f24843a07d70d6324858ac6bf500d80e1462cadd

    • SHA256

      54375f73c1bdc35ee69c07db3f8594fa77a03193d44d868e18da491c5209e4ea

    • SHA512

      6b8011c59d52617e1118f67edfb74fa596fd7bc0ee6d001e4c82add4473ebb0063c848ccae46cbb47acad1f7e6bcd260598133d595e580b00e0706b6a845f64b

    • SSDEEP

      1536:6cyplTW36sv0W7TqrJmrHC+o1DWxFRIQrPvu+xNjkYQH3buI61dB7Z20GkRU8e8U:CpxgOIYSxVrPvu+xNnCU1D7Z2X8e8hi

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks