General

  • Target

    35b09106a7a866ff6666caf6717b5dc6.exe

  • Size

    262KB

  • Sample

    230703-f3p44aeh34

  • MD5

    35b09106a7a866ff6666caf6717b5dc6

  • SHA1

    c08fb9c4ff328b7510a842292bfd19af8808befb

  • SHA256

    f6ce37b73370f6b719f28074163c26cb12d83aa1b7804df61c262379da40bdc6

  • SHA512

    afe9548386c9b7af9a738824149682f326b043d4e48551d654b2d763959a2d5f2299c222921488ae6194c2ab6df4d6c65ac735e95bde3cae3212af518a7aa61c

  • SSDEEP

    3072:I2nV/i6ml0tgD4UmWZ64yJhVbyLNLd7m4tJOyXSwl2vTyf2uV+r5y7ZwYWW/GpeS:I2ZztbUmDIpLdC4t8yXzU7mQ0lh+

Malware Config

Extracted

Family

redline

Botnet

andre

C2

77.91.124.49:19073

Attributes
  • auth_value

    8e5522dc6bdb7e288797bc46c2687b12

Targets

    • Target

      35b09106a7a866ff6666caf6717b5dc6.exe

    • Size

      262KB

    • MD5

      35b09106a7a866ff6666caf6717b5dc6

    • SHA1

      c08fb9c4ff328b7510a842292bfd19af8808befb

    • SHA256

      f6ce37b73370f6b719f28074163c26cb12d83aa1b7804df61c262379da40bdc6

    • SHA512

      afe9548386c9b7af9a738824149682f326b043d4e48551d654b2d763959a2d5f2299c222921488ae6194c2ab6df4d6c65ac735e95bde3cae3212af518a7aa61c

    • SSDEEP

      3072:I2nV/i6ml0tgD4UmWZ64yJhVbyLNLd7m4tJOyXSwl2vTyf2uV+r5y7ZwYWW/GpeS:I2ZztbUmDIpLdC4t8yXzU7mQ0lh+

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks