General

  • Target

    7b82e3f00a895000b951c89e2ebaa89c8f14c498f3501bd6856e4259ffe2f432

  • Size

    584KB

  • Sample

    230605-zpk3rsbd3z

  • MD5

    96682f9f6bbac50a6aea3a3213905970

  • SHA1

    e26b8b2e6df5762d18a465b86da423bddabf2f29

  • SHA256

    7b82e3f00a895000b951c89e2ebaa89c8f14c498f3501bd6856e4259ffe2f432

  • SHA512

    79c5d015bf05b9cb90f4432a563768d45f87e32ad692f153f23f47c237ef9d2171c1e4330e557063ae8336a1d2fe17ea00b3a763f5ce7e50f506672d7a003e4d

  • SSDEEP

    12288:lMrLy90VDhONL4OTCzz66TqZ7Rl/Din1wJVaVttDs19NKBQA7:SyihOyKCyKqlm1wJE3tZ

Malware Config

Extracted

Family

redline

Botnet

diza

C2

83.97.73.126:19048

Attributes
  • auth_value

    0d09b419c8bc967f91c68be4a17e92ee

Targets

    • Target

      7b82e3f00a895000b951c89e2ebaa89c8f14c498f3501bd6856e4259ffe2f432

    • Size

      584KB

    • MD5

      96682f9f6bbac50a6aea3a3213905970

    • SHA1

      e26b8b2e6df5762d18a465b86da423bddabf2f29

    • SHA256

      7b82e3f00a895000b951c89e2ebaa89c8f14c498f3501bd6856e4259ffe2f432

    • SHA512

      79c5d015bf05b9cb90f4432a563768d45f87e32ad692f153f23f47c237ef9d2171c1e4330e557063ae8336a1d2fe17ea00b3a763f5ce7e50f506672d7a003e4d

    • SSDEEP

      12288:lMrLy90VDhONL4OTCzz66TqZ7Rl/Din1wJVaVttDs19NKBQA7:SyihOyKCyKqlm1wJE3tZ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks