09a9d0ac201018bb7db76dc4fd5ced1d4663720578e4a3f3cae696986e99eed8

General
Target

09a9d0ac201018bb7db76dc4fd5ced1d4663720578e4a3f3cae696986e99eed8

Size

405KB

Sample

211125-vbddjsbbf6

Score
10 /10
MD5

010d09ac20e9c512b1d3e0a4cdc4ecd7

SHA1

c3c0a152c2e1567d96bfe6c285f807aa260fa6a7

SHA256

09a9d0ac201018bb7db76dc4fd5ced1d4663720578e4a3f3cae696986e99eed8

SHA512

96bd3d38a61c5081604a5c132be41f19bf6de5ec9d93ff32213047320d5829d0d325ade6e7f795c89175cb135653492bc3eacd3f302dbd51b139ca681d37724d

Malware Config

Extracted

Family redline
Botnet udptest
C2

193.56.146.64:65441
Targets
Target

09a9d0ac201018bb7db76dc4fd5ced1d4663720578e4a3f3cae696986e99eed8

MD5

010d09ac20e9c512b1d3e0a4cdc4ecd7

Filesize

405KB

Score
10 /10
SHA1

c3c0a152c2e1567d96bfe6c285f807aa260fa6a7

SHA256

09a9d0ac201018bb7db76dc4fd5ced1d4663720578e4a3f3cae696986e99eed8

SHA512

96bd3d38a61c5081604a5c132be41f19bf6de5ec9d93ff32213047320d5829d0d325ade6e7f795c89175cb135653492bc3eacd3f302dbd51b139ca681d37724d

Tags

Signatures

  • RedLine

    Description

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    Tags

  • RedLine Payload

  • Reads user/profile data of web browsers

    Description

    Infostealers often target stored browser data, which can include saved credentials etc.

    Tags

    TTPs

    Data from Local System Credentials in Files

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    Tags

    TTPs

    Data from Local System Credentials in Files

  • Checks installed software on the system

    Description

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    Tags

    TTPs

    Query Registry

Related Tasks

behavioral1
MITRE ATT&CK Matrix
Collection
Command and Control
    Credential Access
    Defense Evasion
      Discovery
      Execution
        Exfiltration
          Impact
            Initial Access
              Lateral Movement
                Persistence
                  Privilege Escalation
                    Tasks