General

  • Target

    0e3508f8361a9cebdedc16c29e24de272c88e9ff21de7175d0fe924d18a9e89b

  • Size

    784KB

  • Sample

    231012-jfabxage27

  • MD5

    69dab86413f92fe8993c1cfe9e7e669b

  • SHA1

    1dcbe52b8fbb742bdee9bb9e1ea19aa02e1ef51b

  • SHA256

    0e3508f8361a9cebdedc16c29e24de272c88e9ff21de7175d0fe924d18a9e89b

  • SHA512

    aeddc58f50795b98234f58342b170aad156a6e01329a250de8233e46b5145b8dd216e7c76a5dbe9f5afb4fb6df0b7f0d8f6e6c254d041b0d387fe2fb7ad2fe4a

  • SSDEEP

    24576:wy2JQsE2dwYRGk8xwDfOiai0mACblSIb1X:32JdzrRGkTifiM2D

Malware Config

Extracted

Family

redline

Botnet

buben

C2

77.91.124.82:19071

Attributes
  • auth_value

    c62fa04aa45f5b78f62d2c21fcbefdec

Targets

    • Target

      0e3508f8361a9cebdedc16c29e24de272c88e9ff21de7175d0fe924d18a9e89b

    • Size

      784KB

    • MD5

      69dab86413f92fe8993c1cfe9e7e669b

    • SHA1

      1dcbe52b8fbb742bdee9bb9e1ea19aa02e1ef51b

    • SHA256

      0e3508f8361a9cebdedc16c29e24de272c88e9ff21de7175d0fe924d18a9e89b

    • SHA512

      aeddc58f50795b98234f58342b170aad156a6e01329a250de8233e46b5145b8dd216e7c76a5dbe9f5afb4fb6df0b7f0d8f6e6c254d041b0d387fe2fb7ad2fe4a

    • SSDEEP

      24576:wy2JQsE2dwYRGk8xwDfOiai0mACblSIb1X:32JdzrRGkTifiM2D

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks