General

  • Target

    0x0006000000014118-118.dat

  • Size

    173KB

  • Sample

    230615-m1p5msga52

  • MD5

    bcb740743f072e8ad9e3187537ea4258

  • SHA1

    52b7faabda88ead379fba12ee63bd058a8100423

  • SHA256

    58d5fe2d98c65dbebbeda7ed11a8290c179144925079ba4a7e9efe6d59a0d63b

  • SHA512

    f1154310d81f1a93f2375d1c7d7752355b15776e91e3556fb78e68ede9c0064b7822b61155e239983616df0095b827ea8c04c4c062de417878ed6a3e5ea35ad9

  • SSDEEP

    1536:skPZ36sv0W7TVOn0urHrj7mZvDZZTwIt1xN9UYQrfbutXN3o0oQo0GkRY8e8hL:skXYz3slZvt1xNZOqG0oQob8e8hL

Malware Config

Extracted

Family

redline

Botnet

maxi

C2

83.97.73.130:19061

Attributes
  • auth_value

    6a3f22e5f4209b056a3fd330dc71956a

Targets

    • Target

      0x0006000000014118-118.dat

    • Size

      173KB

    • MD5

      bcb740743f072e8ad9e3187537ea4258

    • SHA1

      52b7faabda88ead379fba12ee63bd058a8100423

    • SHA256

      58d5fe2d98c65dbebbeda7ed11a8290c179144925079ba4a7e9efe6d59a0d63b

    • SHA512

      f1154310d81f1a93f2375d1c7d7752355b15776e91e3556fb78e68ede9c0064b7822b61155e239983616df0095b827ea8c04c4c062de417878ed6a3e5ea35ad9

    • SSDEEP

      1536:skPZ36sv0W7TVOn0urHrj7mZvDZZTwIt1xN9UYQrfbutXN3o0oQo0GkRY8e8hL:skXYz3slZvt1xNZOqG0oQob8e8hL

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks