General

  • Target

    e83858d65699c0ab13d4d68805f25f1a522144fae28f3e80a871aa28fa0a6fef

  • Size

    832KB

  • Sample

    230819-cjw7hsff73

  • MD5

    1319abe8f1903a5ea0ed17e86c59b9d0

  • SHA1

    6c0a0cabcd3b6cdd4dd230d61a0cd937aa9dade4

  • SHA256

    e83858d65699c0ab13d4d68805f25f1a522144fae28f3e80a871aa28fa0a6fef

  • SHA512

    e0314fca39fd8c26121371d03aef099ab735270daf419a00c690eb441ddb1d167674b2b26bb79b93f6e25c63a33a607f6f5039226c93860c9df85902bb15dade

  • SSDEEP

    12288:LMrCy90Q/jPK2xx2nA4K9Hf2yiO0tISPPR2ltglN1JraSZljAs:VyXrSu0nY/ty3j3X

Malware Config

Extracted

Family

redline

Botnet

dugin

C2

77.91.124.73:19071

Attributes
  • auth_value

    7c3e46e091100fd26a6076996d374c28

Targets

    • Target

      e83858d65699c0ab13d4d68805f25f1a522144fae28f3e80a871aa28fa0a6fef

    • Size

      832KB

    • MD5

      1319abe8f1903a5ea0ed17e86c59b9d0

    • SHA1

      6c0a0cabcd3b6cdd4dd230d61a0cd937aa9dade4

    • SHA256

      e83858d65699c0ab13d4d68805f25f1a522144fae28f3e80a871aa28fa0a6fef

    • SHA512

      e0314fca39fd8c26121371d03aef099ab735270daf419a00c690eb441ddb1d167674b2b26bb79b93f6e25c63a33a607f6f5039226c93860c9df85902bb15dade

    • SSDEEP

      12288:LMrCy90Q/jPK2xx2nA4K9Hf2yiO0tISPPR2ltglN1JraSZljAs:VyXrSu0nY/ty3j3X

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks