Overview

overview

10

Static

static

3

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    388KB

  • Sample

    230622-rfjjksgb4w

  • MD5

    b435f4fa4b02f5e0686c0a82b0033354

  • SHA1

    472ea52b01e0ba97f46cf97521f32a563395a744

  • SHA256

    ea52680e80eb9e200c61abd755587ec2fd5ed477e8093dbcd8d75200be09ac0d

  • SHA512

    ba2e2014f472a86266c9809a0252af4c8101f30c5f320445351502039958f8f37aa4166a1d38046f8bc7c161ca18220b8fe52810c45faa36ad3ab9694e33eb27

  • SSDEEP

    12288:wztKe0jWeeIO5Ghgmc0D57ABb0wTH1b/rbOxzrnb2OA8efJUZmM:wkeeex3A6M

Score
10/10
redlinefurgadiscoveryinfostealerspywarestealer

Malware Config

Extracted

Family

redline

Botnet

furga

C2

83.97.73.128:19071

Attributes
  • auth_value

    1b7af6db7a79a3475798fcf494818be7

Targets

    • Target

      file.exe

    • Size

      388KB

    • MD5

      b435f4fa4b02f5e0686c0a82b0033354

    • SHA1

      472ea52b01e0ba97f46cf97521f32a563395a744

    • SHA256

      ea52680e80eb9e200c61abd755587ec2fd5ed477e8093dbcd8d75200be09ac0d

    • SHA512

      ba2e2014f472a86266c9809a0252af4c8101f30c5f320445351502039958f8f37aa4166a1d38046f8bc7c161ca18220b8fe52810c45faa36ad3ab9694e33eb27

    • SSDEEP

      12288:wztKe0jWeeIO5Ghgmc0D57ABb0wTH1b/rbOxzrnb2OA8efJUZmM:wkeeex3A6M

    Score
    10/10
    redlinefurgadiscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks