General

  • Target

    ca9846d93956e71a98478da948c7036f5300d5efdeeb2fb2149b3f021e7eb86f

  • Size

    387KB

  • Sample

    230622-m78wbsea67

  • MD5

    06e171956079635a0dee15889a961384

  • SHA1

    e03ba3bc422c4a0970f335ad999283c589a85ae7

  • SHA256

    ca9846d93956e71a98478da948c7036f5300d5efdeeb2fb2149b3f021e7eb86f

  • SHA512

    1b1f2a788de544245a87b5278200665bbecc6dd277825773ba07055049707cc26bada099e7eed764520974ba053408fb44b1fdfd777be786d60b9b8ee9f4f783

  • SSDEEP

    12288:0dztKe0jWeeIOVxOgmc0D57ABb0wTH1b/rbOxzrnb2OA8efJUZmM:UkeeeH3A6M

Malware Config

Extracted

Family

redline

Botnet

furga

C2

83.97.73.128:19071

Attributes
  • auth_value

    1b7af6db7a79a3475798fcf494818be7

Targets

    • Target

      ca9846d93956e71a98478da948c7036f5300d5efdeeb2fb2149b3f021e7eb86f

    • Size

      387KB

    • MD5

      06e171956079635a0dee15889a961384

    • SHA1

      e03ba3bc422c4a0970f335ad999283c589a85ae7

    • SHA256

      ca9846d93956e71a98478da948c7036f5300d5efdeeb2fb2149b3f021e7eb86f

    • SHA512

      1b1f2a788de544245a87b5278200665bbecc6dd277825773ba07055049707cc26bada099e7eed764520974ba053408fb44b1fdfd777be786d60b9b8ee9f4f783

    • SSDEEP

      12288:0dztKe0jWeeIOVxOgmc0D57ABb0wTH1b/rbOxzrnb2OA8efJUZmM:UkeeeH3A6M

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks