General

  • Target

    ddf7680c982672d245d94fe7e.exe

  • Size

    517KB

  • Sample

    230710-xfy7xseb4s

  • MD5

    ddf7680c982672d245d94fe7e41939bc

  • SHA1

    4d5b00bc1cafaa9e835c13433da394a19151dd45

  • SHA256

    7035837660489e07809fa617cd439f6a88e84abe26bf4d47b35727b02aef6dd3

  • SHA512

    188d8c6ef471e98d357887af129f9c99987b943cefee58fe791a5b878f6a1bc44e0c84ba7334422f9c8611c3bc0918258888e246d44580e00361da773040c2a2

  • SSDEEP

    12288:W4qA0fvdaRdnQgOZVKI75NFhs6yhR3+4S7pvn9O:WVAevd82gOHKufFhs6yhR3+17pFO

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Targets

    • Target

      ddf7680c982672d245d94fe7e.exe

    • Size

      517KB

    • MD5

      ddf7680c982672d245d94fe7e41939bc

    • SHA1

      4d5b00bc1cafaa9e835c13433da394a19151dd45

    • SHA256

      7035837660489e07809fa617cd439f6a88e84abe26bf4d47b35727b02aef6dd3

    • SHA512

      188d8c6ef471e98d357887af129f9c99987b943cefee58fe791a5b878f6a1bc44e0c84ba7334422f9c8611c3bc0918258888e246d44580e00361da773040c2a2

    • SSDEEP

      12288:W4qA0fvdaRdnQgOZVKI75NFhs6yhR3+4S7pvn9O:WVAevd82gOHKufFhs6yhR3+17pFO

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks