General

  • Target

    513733282cc0db1260fb7805be50d8fbbea6e8716941a5aaa1ee306f3aee17df

  • Size

    855KB

  • Sample

    230817-ppwjdshc75

  • MD5

    ea1e2bbfce510b2117297aef143838cf

  • SHA1

    ae367074cd5530ab9e874a9946c99d48ef7b48bc

  • SHA256

    513733282cc0db1260fb7805be50d8fbbea6e8716941a5aaa1ee306f3aee17df

  • SHA512

    0c941e2c99a160e6cd8c150625ba6bdda961e8464435e289f07c2a47e307337e5cb952cc4ecc66e8ce1f2395c848a7160317f0d160258ba11d25ce56522bb207

  • SSDEEP

    24576:cyDAVAU6wg3uOO7Fl4RK3rBL4apTz5+ry:LaA+dOg7VBLfzEr

Malware Config

Extracted

Family

redline

Botnet

maga

C2

77.91.124.54:19071

Attributes
  • auth_value

    9dd7a0be219be9b6228dc9b4e112b812

Targets

    • Target

      513733282cc0db1260fb7805be50d8fbbea6e8716941a5aaa1ee306f3aee17df

    • Size

      855KB

    • MD5

      ea1e2bbfce510b2117297aef143838cf

    • SHA1

      ae367074cd5530ab9e874a9946c99d48ef7b48bc

    • SHA256

      513733282cc0db1260fb7805be50d8fbbea6e8716941a5aaa1ee306f3aee17df

    • SHA512

      0c941e2c99a160e6cd8c150625ba6bdda961e8464435e289f07c2a47e307337e5cb952cc4ecc66e8ce1f2395c848a7160317f0d160258ba11d25ce56522bb207

    • SSDEEP

      24576:cyDAVAU6wg3uOO7Fl4RK3rBL4apTz5+ry:LaA+dOg7VBLfzEr

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks