General

  • Target

    cc5d68db13e0e43c332a24881262e8fa294b677a8ed592c53b12faac9d26452a

  • Size

    957KB

  • Sample

    230818-218pbagd9t

  • MD5

    8a831b47aebdcec7a0569d77b8512c37

  • SHA1

    dde7b9357026a9feb08f951e86eb8a328ca5a816

  • SHA256

    cc5d68db13e0e43c332a24881262e8fa294b677a8ed592c53b12faac9d26452a

  • SHA512

    9ef04cafe2a5ada6509ffde3736eb9896b95accc1a748c0affeeeb837609d1c4cac1cea000c03b36a4697fdbf91ad22e2c67400ce3ef117df9df59bff83a1d61

  • SSDEEP

    24576:HyFXdZMrgZgeUV0vX2iZNkqF3OyQY7Z3SBbJ:ShrJUV0vDFFeSVsb

Malware Config

Extracted

Family

redline

Botnet

dugin

C2

77.91.124.73:19071

Attributes
  • auth_value

    7c3e46e091100fd26a6076996d374c28

Targets

    • Target

      cc5d68db13e0e43c332a24881262e8fa294b677a8ed592c53b12faac9d26452a

    • Size

      957KB

    • MD5

      8a831b47aebdcec7a0569d77b8512c37

    • SHA1

      dde7b9357026a9feb08f951e86eb8a328ca5a816

    • SHA256

      cc5d68db13e0e43c332a24881262e8fa294b677a8ed592c53b12faac9d26452a

    • SHA512

      9ef04cafe2a5ada6509ffde3736eb9896b95accc1a748c0affeeeb837609d1c4cac1cea000c03b36a4697fdbf91ad22e2c67400ce3ef117df9df59bff83a1d61

    • SSDEEP

      24576:HyFXdZMrgZgeUV0vX2iZNkqF3OyQY7Z3SBbJ:ShrJUV0vDFFeSVsb

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks