General

  • Target

    8ef0ebaa3b5dc0dbcae4fa07615ef639.exe

  • Size

    957KB

  • Sample

    230819-llgdhsgg42

  • MD5

    8ef0ebaa3b5dc0dbcae4fa07615ef639

  • SHA1

    e1e72975b7c46549938298f8e4ddf0bbed102ea9

  • SHA256

    b0e12333e12e7d99f9f4d43c0b6545c79634569fed724c5086b642061ec61065

  • SHA512

    780850e3ecfcaef12bc6215b074c284554306982845fe73d6105fdf98074044ee88ad6e393e32252d204ba4332d9cd7a57f5abbf23f602289196384a5e3b2d3a

  • SSDEEP

    24576:jyxkLAFS2N1DU6MgiUnc/UVrts1Uirntj:2mghKAOYG17rn

Malware Config

Extracted

Family

redline

Botnet

dugin

C2

77.91.124.73:19071

Attributes
  • auth_value

    7c3e46e091100fd26a6076996d374c28

Targets

    • Target

      8ef0ebaa3b5dc0dbcae4fa07615ef639.exe

    • Size

      957KB

    • MD5

      8ef0ebaa3b5dc0dbcae4fa07615ef639

    • SHA1

      e1e72975b7c46549938298f8e4ddf0bbed102ea9

    • SHA256

      b0e12333e12e7d99f9f4d43c0b6545c79634569fed724c5086b642061ec61065

    • SHA512

      780850e3ecfcaef12bc6215b074c284554306982845fe73d6105fdf98074044ee88ad6e393e32252d204ba4332d9cd7a57f5abbf23f602289196384a5e3b2d3a

    • SSDEEP

      24576:jyxkLAFS2N1DU6MgiUnc/UVrts1Uirntj:2mghKAOYG17rn

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks