General

  • Target
    Autorisoft.zip
  • Size 17.9MB
  • Sample240719-npr1jascqa
  • SHA256 645e274fec3723d065308f9b16b33392ed7f51fbd5ffc3c00806c2efafb08b65
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • redline

C2
  • 65.108.29.210:21638

Attributes
  • auth_value

    ad39d6a8ea7823f2a92f57ebaa4c98a5

Targets

    • Target
      Autorisoft.zip
    • Size 17.9MB
    • SHA256 645e274fec3723d065308f9b16b33392ed7f51fbd5ffc3c00806c2efafb08b65
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      Start.exe
    • Size 301KB
    • SHA256 b371eae7b55688d307b653759c2d4ddfe3672eb7b5567bcfa9c3f75f5c6d6255
    • MD5 SHA1 SHA512 SSDEEP
    • Gurcu, WhiteSnake

      Gurcu is a malware stealer written in C#.

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Suspicious use of SetThreadContext

    • Target
      gui.lua
    • Size 15KB
    • SHA256 1cefe4067f5dfa55873072a76b5b766f19115550cd405b6eee9d222d9bd5436d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      internal/extensions/CMemoryBlock.lua
    • Size 141B
    • SHA256 400bc118e420ab428675226e08a2cba5e0bd4121834168a5fb9b8004502ae3f0
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      internal/extensions/CNativeReg.lua
    • Size 3KB
    • SHA256 20298293eaf7060ea4cf99a5b2e790471431166fe618b1032719b01d5d00adc5
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      internal/extensions/CScriptThread.lua
    • Size 2KB
    • SHA256 d9721aab78d7afa65ed289ae619ab06c6ca86f1bd1e30bd6f16bccbc5369518d
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      internal/extensions/CScriptThread_EventHandlers.lua
    • Size 2KB
    • SHA256 fa1c4d1944b33c32f9155ea2512c397fb360b7fef6b90cd24e8ca1101d1d8a7d
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      internal/extensions/CScriptThread_Timers.lua
    • Size 1KB
    • SHA256 89b849bd208de27791887738d84a2c20f1e6be9acb5b5973459e097fa6c2e26a
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      internal/extensions/Vector.lua
    • Size 576B
    • SHA256 32eb9be018ee9e6acc74b70a6658daa1517590c6d9a67bf42d1ea1b1226271fe
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      internal/extensions/keycodes.lua
    • Size 2KB
    • SHA256 feef07106680ddb04400c161e42999e2dc183304a5edaf36dd934d61c24e16b1
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      internal/extensions/vehicles.lua
    • Size 13KB
    • SHA256 33aceffacff3af61fe5743c9debd7968e352a2cda0d522d4dca7c68a8e17974c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      internal/game/AI.lua
    • Size 1KB
    • SHA256 ea9c8d9600b9caf89e41a79179c29f4757caa12346f49b2b498ad37a1c13f4e2
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      internal/game/Blip.lua
    • Size 4KB
    • SHA256 9462b7494aa4ff6ed75e233c3d0f2cb917ac9424242fee7f5ba4cdc9c7727668
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      internal/game/Entity.lua
    • Size 4KB
    • SHA256 24aacf0e6d8f04ab81422bd5dc26f23a0a23bb568b3e63817461aef5a4eaf0ca
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      internal/game/Object.lua
    • Size 95B
    • SHA256 a77f0b448eafd9fea35835629e4480b911bda3faa402a996d813db13867e512b
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      internal/game/Ped.lua
    • Size 3KB
    • SHA256 91e8479efd50675e99f568a0f835383166aed7b146890e72029de7dff54d4ae8
    • MD5 SHA1 SHA512
    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

gurcu
Score
10/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

gurcuredlineinfostealerstealer
Score
10/10

behavioral4

gurcuredlineinfostealerstealer
Score
10/10

behavioral5

Score
3/10

behavioral6

Score
3/10

behavioral7

Score
3/10

behavioral8

Score
3/10

behavioral9

Score
3/10

behavioral10

Score
3/10

behavioral11

Score
3/10

behavioral12

Score
3/10

behavioral13

Score
3/10

behavioral14

Score
3/10

behavioral15

Score
3/10

behavioral16

Score
3/10

behavioral17

Score
3/10

behavioral18

Score
3/10

behavioral19

Score
3/10

behavioral20

Score
3/10

behavioral21

Score
3/10

behavioral22

Score
3/10

behavioral23

Score
3/10

behavioral24

Score
3/10

behavioral25

Score
3/10

behavioral26

Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

Score
3/10

behavioral30

Score
3/10

behavioral31

Score
3/10

behavioral32

Score
3/10