General

  • Target

    06583099.dat

  • Size

    172KB

  • Sample

    230606-nsbsqadd74

  • MD5

    b8c8bdbdbf570c266178ffdd30fbe2fa

  • SHA1

    82a412de72257fa34aa2940c08e484a0f8ab5b7c

  • SHA256

    2395a8c43a3b013c8a71575b7dd69a732ebcfe0339403ef1374f2da880eb9021

  • SHA512

    e891a7aa2051ec5b66d3a10a38c11229c9aa4b5e44dfd98e1acc4bc086b53a4f962808921b21c39dc223979d01834b8d9b315a6ab0d2306704a6456d4b35d40f

  • SSDEEP

    3072:sOPxkahkUcphQF470xNe0QA6AKlhA8e8hU:PPJexvAKlhA

Malware Config

Extracted

Family

redline

Botnet

diza

C2

83.97.73.126:19048

Attributes
  • auth_value

    0d09b419c8bc967f91c68be4a17e92ee

Targets

    • Target

      06583099.dat

    • Size

      172KB

    • MD5

      b8c8bdbdbf570c266178ffdd30fbe2fa

    • SHA1

      82a412de72257fa34aa2940c08e484a0f8ab5b7c

    • SHA256

      2395a8c43a3b013c8a71575b7dd69a732ebcfe0339403ef1374f2da880eb9021

    • SHA512

      e891a7aa2051ec5b66d3a10a38c11229c9aa4b5e44dfd98e1acc4bc086b53a4f962808921b21c39dc223979d01834b8d9b315a6ab0d2306704a6456d4b35d40f

    • SSDEEP

      3072:sOPxkahkUcphQF470xNe0QA6AKlhA8e8hU:PPJexvAKlhA

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks