General

  • Target

    72b0829f02d6495c469e35469.exe

  • Size

    518KB

  • Sample

    230708-y7cnnsah2z

  • MD5

    72b0829f02d6495c469e35469ca71bbe

  • SHA1

    5da83853e4629f02f9436a3d91efd8d14178b0e7

  • SHA256

    7d0b155b95248002441c6e45f30672503e4c985172832607c93a393e7122a7b5

  • SHA512

    6a23805aa680cfc2cd8c18d9076b604e89c5c31f56d83a070cfd6c6d056b02ad9d2b1eedab31b0fe9940ff380006dab03130de8078869b21c99796b7ccb38c0c

  • SSDEEP

    12288:AuknfvzaRdnQgdi84HFJ+nHQnWNgqRX2Y:Aukfvz82gdJ4HSnHK8gqJf

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Targets

    • Target

      72b0829f02d6495c469e35469.exe

    • Size

      518KB

    • MD5

      72b0829f02d6495c469e35469ca71bbe

    • SHA1

      5da83853e4629f02f9436a3d91efd8d14178b0e7

    • SHA256

      7d0b155b95248002441c6e45f30672503e4c985172832607c93a393e7122a7b5

    • SHA512

      6a23805aa680cfc2cd8c18d9076b604e89c5c31f56d83a070cfd6c6d056b02ad9d2b1eedab31b0fe9940ff380006dab03130de8078869b21c99796b7ccb38c0c

    • SSDEEP

      12288:AuknfvzaRdnQgdi84HFJ+nHQnWNgqRX2Y:Aukfvz82gdJ4HSnHK8gqJf

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks