General

  • Target

    7bf2f48d58010eedd8df3a6b5.exe

  • Size

    518KB

  • Sample

    230708-tnydtaga9w

  • MD5

    e80962cda1467356c56448a7bc37d852

  • SHA1

    d5f5f48efce0b7e94e557a0763efb95f36d84a89

  • SHA256

    7bf2f48d58010eedd8df3a6b54b3dc816cbec1eca4d7e97d0930d050cf928cb6

  • SHA512

    a931d90e5fa3fe424fc222c8443b01e7dbabc32fc1531b2c2716b2ea04703596c99b236332247fdd148e7084ae307d0024c8063dedef86c3c7e413eddd6e06bc

  • SSDEEP

    12288:AX+0fvzaRdnQgBmljqGqKOrfvrf8wmXrN:AX+evz82gBMjquEf7u

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Targets

    • Target

      7bf2f48d58010eedd8df3a6b5.exe

    • Size

      518KB

    • MD5

      e80962cda1467356c56448a7bc37d852

    • SHA1

      d5f5f48efce0b7e94e557a0763efb95f36d84a89

    • SHA256

      7bf2f48d58010eedd8df3a6b54b3dc816cbec1eca4d7e97d0930d050cf928cb6

    • SHA512

      a931d90e5fa3fe424fc222c8443b01e7dbabc32fc1531b2c2716b2ea04703596c99b236332247fdd148e7084ae307d0024c8063dedef86c3c7e413eddd6e06bc

    • SSDEEP

      12288:AX+0fvzaRdnQgBmljqGqKOrfvrf8wmXrN:AX+evz82gBMjquEf7u

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks