Overview

overview

10

Static

static

3

fc7a2d0816...67.exe

windows7-x64

10

fc7a2d0816...67.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4ba9e1b30a139933dcebca3353ea46a8.bin

  • Size

    738KB

  • Sample

    230614-bzszcsce43

  • MD5

    678d109d23212a992c418766bbfba40e

  • SHA1

    f604859c02f468c18270b494497f7dde1d018685

  • SHA256

    f7b5fe559fc1f11e261be07cb39d9eb925ee77f0bc11a1a11c701c1550968cef

  • SHA512

    ddaa29502ef13d9bfc41fbff33a3815bc2cf70f0c7adecdc31d9f402414cee1e5cce9b2e7f5e17e9673ed61a365c3527868687c120afaebd6b7c6b5c44664060

  • SSDEEP

    12288:BH66DcHQworl6bOScAES4U8hq+u5+PoEnvGv5xL//QwUtGVwZ9bZRj/iHJ2mNKAM:BHdeQwIPHjML58Ov5FXQ5yu91Rjg2mNS

Score
10/10
redlineborisinfostealerpersistence

Malware Config

Extracted

Family

redline

Botnet

boris

C2

83.97.73.129:19068

Attributes
  • auth_value

    205e4fccc0f8c7da1d56fb1da4ac5e6a

Targets

    • Target

      fc7a2d08160f299450390086b02c5b02277e1eb8c7cab88bb4313594d0c0cb67.exe

    • Size

      781KB

    • MD5

      4ba9e1b30a139933dcebca3353ea46a8

    • SHA1

      6acf5ee2f09d84c2c910eb10da849370bed5a1ae

    • SHA256

      fc7a2d08160f299450390086b02c5b02277e1eb8c7cab88bb4313594d0c0cb67

    • SHA512

      0e901c2e31cf463e9fe3ceb071f6afeab115520c1234d61b929995326520e483ce3e321787fa31feca5ff318e89ce7d379c44b74f0aeff6e21c5a4d6eebbe90e

    • SSDEEP

      12288:EMrFy900Zf07Cm8+FGUh/QVnBuhAhagv9W0bMzsFeodBRJDU02Ht3w9T5MVcuZ:RyZZMem8+o26IihagEdszvR2N3kzu

    Score
    10/10
    redlineborisinfostealerpersistence

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks