General
Target

Payment Confirmation Ref-876627.exe

Size

1MB

Sample

220504-ft9gdafgcn

Score
10/10
MD5

2d75aafb29ad71871745dce716de4517

SHA1

23f737a59884324f91c86af756f97f272e07cedc

SHA256

58274c41a987c806022f227b6df900bb1bd3fab9a7a87a3d34a5bd4f1b58980d

SHA512

491500861bfe415470e2dba2aaa448bf3ab9056e49a1e753835a59a6925de56c5947b794d564fbc83d948361fd3f0a60ae7a4c9acfd2896397636bdc51b7f7b1

Malware Config

Extracted

Family

redline

Botnet

1

C2

45.87.63.175:80

Attributes
auth_value
bee3c59bada67864cb0d4dde954652de
Targets
Target

Payment Confirmation Ref-876627.exe

MD5

2d75aafb29ad71871745dce716de4517

Filesize

1MB

Score
10/10
SHA1

23f737a59884324f91c86af756f97f272e07cedc

SHA256

58274c41a987c806022f227b6df900bb1bd3fab9a7a87a3d34a5bd4f1b58980d

SHA512

491500861bfe415470e2dba2aaa448bf3ab9056e49a1e753835a59a6925de56c5947b794d564fbc83d948361fd3f0a60ae7a4c9acfd2896397636bdc51b7f7b1

Tags

Signatures

  • RedLine

    Description

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    Tags

  • RedLine Payload

  • Reads user/profile data of web browsers

    Description

    Infostealers often target stored browser data, which can include saved credentials etc.

    Tags

    TTPs

    Data from Local SystemCredentials in Files
  • Accesses cryptocurrency files/wallets, possible credential harvesting

    Tags

    TTPs

    Data from Local SystemCredentials in Files
  • Checks installed software on the system

    Description

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    Tags

    TTPs

    Query Registry

Related Tasks

MITRE ATT&CK Matrix
Command and Control
    Credential Access
    Defense Evasion
      Discovery
      Execution
        Exfiltration
          Impact
            Initial Access
              Lateral Movement
                Persistence
                  Privilege Escalation
                    Tasks

                    static1

                    Score
                    N/A

                    behavioral2

                    Score
                    7/10