General

  • Target

    x4696713.exe

  • Size

    319KB

  • Sample

    230708-3rxfcsad88

  • MD5

    3441e6317cd6e42af1c6cd1f260d991a

  • SHA1

    2b5ca51394ccfd915f3407860a664ac78987ba1c

  • SHA256

    91a9b37a13cb7f8ee0a566939b846009f6bd14a71c7b66d2c333348e86907f87

  • SHA512

    b3c5be466b826f7e05fe1babb16092a53126cec4f84cd38eb73a69d9935b856216cf3dbcb00f84b5f8b042252220ae8812fb0dc3c0c31673f17b7680f33fca9a

  • SSDEEP

    6144:Key+bnr+2p0yN90QEUP54pcOnBJneBbFLxarfFpcvXEJ:+Mryy90+GpbBJnu5xsfFOs

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Targets

    • Target

      x4696713.exe

    • Size

      319KB

    • MD5

      3441e6317cd6e42af1c6cd1f260d991a

    • SHA1

      2b5ca51394ccfd915f3407860a664ac78987ba1c

    • SHA256

      91a9b37a13cb7f8ee0a566939b846009f6bd14a71c7b66d2c333348e86907f87

    • SHA512

      b3c5be466b826f7e05fe1babb16092a53126cec4f84cd38eb73a69d9935b856216cf3dbcb00f84b5f8b042252220ae8812fb0dc3c0c31673f17b7680f33fca9a

    • SSDEEP

      6144:Key+bnr+2p0yN90QEUP54pcOnBJneBbFLxarfFpcvXEJ:+Mryy90+GpbBJnu5xsfFOs

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks