redline | 7941679c0a795bf34dc1c2020b78cffc72d9245efbf25be796ff8cc5ad4715aa | Triage

Sharing

General

Target

7941679c0a795bf34dc1c2020b78cffc72d9245efbf25be796ff8cc5ad4715aa
Size

368KB
Sample

220509-sx35zsdff5
MD5

f740211150fd78907ad8c364e550248b
SHA1

b159dd4a7f266de0fde7ffac0ca4339a8193e0bd
SHA256

7941679c0a795bf34dc1c2020b78cffc72d9245efbf25be796ff8cc5ad4715aa
SHA512

4b95ee64d586655f2bb9329f3f33d9d8d0f25cc6a7f601cd79f44d7ca90c75f1d9c34e040a24729d495c42c1f39f2fb3b95336fa4d21698e82d7c48c9321b4b1

Score

10^/10

redline 50n discovery infostealer spyware stealer

Malware Config

Extracted

Family

redline

Botnet

50n

C2

193.106.191.190:23196

Attributes

auth_value
d61a9ba1568b3b8e34c959aa0f254969

Targets

- Target
  
  7941679c0a795bf34dc1c2020b78cffc72d9245efbf25be796ff8cc5ad4715aa
- Size
  
  368KB
- MD5
  
  f740211150fd78907ad8c364e550248b
- SHA1
  
  b159dd4a7f266de0fde7ffac0ca4339a8193e0bd
- SHA256
  
  7941679c0a795bf34dc1c2020b78cffc72d9245efbf25be796ff8cc5ad4715aa
- SHA512
  
  4b95ee64d586655f2bb9329f3f33d9d8d0f25cc6a7f601cd79f44d7ca90c75f1d9c34e040a24729d495c42c1f39f2fb3b95336fa4d21698e82d7c48c9321b4b1
Score

10^/10

redline 50n discovery infostealer spyware stealer
- RedLine
  RedLine Stealer is a malware family written in C#, first appearing in early 2020.
  infostealer redline
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

redline50ndiscoveryinfostealerspywarestealer