General

  • Target

    d8e93551bc64022d36892f187c094bb7c72fdfd474efd59d671abb2ebe9e6331

  • Size

    576KB

  • Sample

    230615-168e3abd7w

  • MD5

    1a4b23f904b79a5e52856ef40844e34a

  • SHA1

    05eaa04207138cfce00b9037a0bf4a9ee14340f5

  • SHA256

    d8e93551bc64022d36892f187c094bb7c72fdfd474efd59d671abb2ebe9e6331

  • SHA512

    536d18a8c4782c50317d7536dde8e28cb3e6f4ba440f22d10bd8d19c5f1be3eab2163cbe6cb5a9c7023d91d20a65cefc0ee941bc26c49fabeb62760f4fa6ae94

  • SSDEEP

    12288:HMr+y907eEl/OQ/HOxEhw7J/OLoYBIi8rEhUDRqgXIef:NyCZHhw74LRBIdA6

Malware Config

Extracted

Family

redline

Botnet

dana

C2

83.97.73.130:19061

Attributes
  • auth_value

    da2d1691db653e49676d799e1eae2673

Targets

    • Target

      d8e93551bc64022d36892f187c094bb7c72fdfd474efd59d671abb2ebe9e6331

    • Size

      576KB

    • MD5

      1a4b23f904b79a5e52856ef40844e34a

    • SHA1

      05eaa04207138cfce00b9037a0bf4a9ee14340f5

    • SHA256

      d8e93551bc64022d36892f187c094bb7c72fdfd474efd59d671abb2ebe9e6331

    • SHA512

      536d18a8c4782c50317d7536dde8e28cb3e6f4ba440f22d10bd8d19c5f1be3eab2163cbe6cb5a9c7023d91d20a65cefc0ee941bc26c49fabeb62760f4fa6ae94

    • SSDEEP

      12288:HMr+y907eEl/OQ/HOxEhw7J/OLoYBIi8rEhUDRqgXIef:NyCZHhw74LRBIdA6

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks