General

  • Target

    09d276004abf88f6eefde65d3cf03899b5c6eca6ed1025fb18d8047565a945b9_JC.exe

  • Size

    948KB

  • Sample

    230820-salmesfh59

  • MD5

    8723f443a85172e2cc6fad3d5cc871f2

  • SHA1

    1f71c22c4cc79de3eb4519d62497a8991f0f9e3d

  • SHA256

    09d276004abf88f6eefde65d3cf03899b5c6eca6ed1025fb18d8047565a945b9

  • SHA512

    91f5a760af3b2b27c5ae7856cf9565aa2c8100c36e4d6886c663add3d05a758bb31add0a8770c57139962942461effaa9b28ba6f3f4102865d89ee0285008405

  • SSDEEP

    24576:tyO8w/+aS4AXTA/BM/WR/RrnP77rst9GocYXOyaLipLFw:IO8wmPhGdnjrsgY7ua

Malware Config

Extracted

Family

redline

Botnet

dugin

C2

77.91.124.73:19071

Attributes
  • auth_value

    7c3e46e091100fd26a6076996d374c28

Targets

    • Target

      09d276004abf88f6eefde65d3cf03899b5c6eca6ed1025fb18d8047565a945b9_JC.exe

    • Size

      948KB

    • MD5

      8723f443a85172e2cc6fad3d5cc871f2

    • SHA1

      1f71c22c4cc79de3eb4519d62497a8991f0f9e3d

    • SHA256

      09d276004abf88f6eefde65d3cf03899b5c6eca6ed1025fb18d8047565a945b9

    • SHA512

      91f5a760af3b2b27c5ae7856cf9565aa2c8100c36e4d6886c663add3d05a758bb31add0a8770c57139962942461effaa9b28ba6f3f4102865d89ee0285008405

    • SSDEEP

      24576:tyO8w/+aS4AXTA/BM/WR/RrnP77rst9GocYXOyaLipLFw:IO8wmPhGdnjrsgY7ua

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks