General

  • Target

    df33aaae1cc14ee2e169bc388.exe

  • Size

    518KB

  • Sample

    230710-xm5y2sch89

  • MD5

    df33aaae1cc14ee2e169bc38840c2513

  • SHA1

    0da7de986dff2cb7c1d1f611ff61a56f3f91ca16

  • SHA256

    067c52b1e38d205d25f5f8bd5778ad6936c87f41bfc5026edd89668826b6223d

  • SHA512

    1627732c5e85b417c32dbafcd986b9654148dce4125d151e9845348357fe2bc428d799dedd21fe3b05cbe2ce521c15fb13a238ed5d7c2a4200a914f30c59b006

  • SSDEEP

    12288:DqXnafvBaRdnQgjW4F/9bIqXyztkXtGKq8utsN:DqXnwvB82gy4F/5yJUGf8utw

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Targets

    • Target

      df33aaae1cc14ee2e169bc388.exe

    • Size

      518KB

    • MD5

      df33aaae1cc14ee2e169bc38840c2513

    • SHA1

      0da7de986dff2cb7c1d1f611ff61a56f3f91ca16

    • SHA256

      067c52b1e38d205d25f5f8bd5778ad6936c87f41bfc5026edd89668826b6223d

    • SHA512

      1627732c5e85b417c32dbafcd986b9654148dce4125d151e9845348357fe2bc428d799dedd21fe3b05cbe2ce521c15fb13a238ed5d7c2a4200a914f30c59b006

    • SSDEEP

      12288:DqXnafvBaRdnQgjW4F/9bIqXyztkXtGKq8utsN:DqXnwvB82gy4F/5yJUGf8utw

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks