Overview

overview

10

Static

static

3

09163099.exe

windows7-x64

10

09163099.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    09163099.exe

  • Size

    402KB

  • Sample

    230623-jljsjadc55

  • MD5

    86491a4769778803a12304e07251a97f

  • SHA1

    d33659a05fb8e508392553967cfccbd6a5114b11

  • SHA256

    0edd0c73b8f78813430d4d1df7ac02b4051f59f56e440ca2d3a7485fd919d230

  • SHA512

    e13fb8ac174594192ee0035f533c87516f5d3a96aec87b238d7000339013a9fffafc61adba84eaf3975095ac95afb2077b58d3c02576867a942dd3d5245a5805

  • SSDEEP

    6144:7C6EAMqDDHAC9c8+2thu4U1wExVAO6YdTt82OqJ5tAu/YO93IX:etA3DjAC9cDxVTFt82O25tx/0

Score
10/10
redlinefurgadiscoveryinfostealerspywarestealer

Malware Config

Extracted

Family

redline

Botnet

furga

C2

83.97.73.128:19071

Attributes
  • auth_value

    1b7af6db7a79a3475798fcf494818be7

Targets

    • Target

      09163099.exe

    • Size

      402KB

    • MD5

      86491a4769778803a12304e07251a97f

    • SHA1

      d33659a05fb8e508392553967cfccbd6a5114b11

    • SHA256

      0edd0c73b8f78813430d4d1df7ac02b4051f59f56e440ca2d3a7485fd919d230

    • SHA512

      e13fb8ac174594192ee0035f533c87516f5d3a96aec87b238d7000339013a9fffafc61adba84eaf3975095ac95afb2077b58d3c02576867a942dd3d5245a5805

    • SSDEEP

      6144:7C6EAMqDDHAC9c8+2thu4U1wExVAO6YdTt82OqJ5tAu/YO93IX:etA3DjAC9cDxVTFt82O25tx/0

    Score
    10/10
    redlinefurgadiscoveryinfostealerspywarestealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks