General

  • Target

    66963e9797bcc258ff5b5688dee97a3a3bc3c14594485eb37c560cd74de770ac

  • Size

    785KB

  • Sample

    230921-h2g37sgb29

  • MD5

    92fcb746384e89f998ba0d891915d385

  • SHA1

    70db60b2f6fb553eda94b0229f446be36af446cc

  • SHA256

    66963e9797bcc258ff5b5688dee97a3a3bc3c14594485eb37c560cd74de770ac

  • SHA512

    baee4b65530f7162f524b961e8f8cbf149e3fd984452686f3c091a4dc7bc2b7fb99bac69e83ed2ddf208b18e50526798187804d2020a4bc659da6566d289e003

  • SSDEEP

    24576:py6l7g//YPPG4KO9Q+XGPZ/fEjU/3jL+Jo:c6pg/QPeBOV6Z/8w/3j

Malware Config

Extracted

Family

redline

Botnet

buben

C2

77.91.124.82:19071

Attributes
  • auth_value

    c62fa04aa45f5b78f62d2c21fcbefdec

Targets

    • Target

      66963e9797bcc258ff5b5688dee97a3a3bc3c14594485eb37c560cd74de770ac

    • Size

      785KB

    • MD5

      92fcb746384e89f998ba0d891915d385

    • SHA1

      70db60b2f6fb553eda94b0229f446be36af446cc

    • SHA256

      66963e9797bcc258ff5b5688dee97a3a3bc3c14594485eb37c560cd74de770ac

    • SHA512

      baee4b65530f7162f524b961e8f8cbf149e3fd984452686f3c091a4dc7bc2b7fb99bac69e83ed2ddf208b18e50526798187804d2020a4bc659da6566d289e003

    • SSDEEP

      24576:py6l7g//YPPG4KO9Q+XGPZ/fEjU/3jL+Jo:c6pg/QPeBOV6Z/8w/3j

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks