Overview

overview

10

Static

static

3

08574399.exe

windows7-x64

10

08574399.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    08574399.exe

  • Size

    402KB

  • Sample

    230623-jjhsfsdc24

  • MD5

    ad443415ba7778fe7ae8cb13eb315203

  • SHA1

    f38dd27971633fa41afdbc349207621c57b915ec

  • SHA256

    c96aa40b620893e999e401d8b1abc7c151ecd8bbcc64fb80883692b6918d03d1

  • SHA512

    5b1f4d509f9db33dd9e379ed2d3fffea6ca183c61142d31c24a4a451c393f959f4aecf9b68a3f66543182e4718ede9f2b0cf56eca70297cb679535e976f71bda

  • SSDEEP

    6144:kBlQEukyg4oAl9U8Jthu98ru3AOo5dTt82OqJ5tAu/YO93IA:4l/ungzAl9UrMFt82O25tx/0

Score
10/10
redlinefurgadiscoveryinfostealerspywarestealer

Malware Config

Extracted

Family

redline

Botnet

furga

C2

83.97.73.128:19071

Attributes
  • auth_value

    1b7af6db7a79a3475798fcf494818be7

Targets

    • Target

      08574399.exe

    • Size

      402KB

    • MD5

      ad443415ba7778fe7ae8cb13eb315203

    • SHA1

      f38dd27971633fa41afdbc349207621c57b915ec

    • SHA256

      c96aa40b620893e999e401d8b1abc7c151ecd8bbcc64fb80883692b6918d03d1

    • SHA512

      5b1f4d509f9db33dd9e379ed2d3fffea6ca183c61142d31c24a4a451c393f959f4aecf9b68a3f66543182e4718ede9f2b0cf56eca70297cb679535e976f71bda

    • SSDEEP

      6144:kBlQEukyg4oAl9U8Jthu98ru3AOo5dTt82OqJ5tAu/YO93IA:4l/ungzAl9UrMFt82O25tx/0

    Score
    10/10
    redlinefurgadiscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks