redline | 4a00550c9dbe3cc73c8a70e2eb3da630b93326f1951c8ca48945d09a007ba45f | Triage

Sharing

General

Target

4a00550c9dbe3cc73c8a70e2eb3da630b93326f1951c8ca48945d09a007ba45f
Size

399KB
Sample

220516-pd42dsahh7
MD5

175ce07deae1048297f8c6bb02bbc7ff
SHA1

ccabbbfa5618f91f33221318fae7ed287f5ea391
SHA256

4a00550c9dbe3cc73c8a70e2eb3da630b93326f1951c8ca48945d09a007ba45f
SHA512

a9acab23a6f35dfa9df67050d90d4fab51267fac6be7ca8a96f9cab558b6498518d36e369a6a8e840f0f6209e1f16242cdca36093b3c35460eded24166b8c46f

Score

10^/10

redline 51 discovery infostealer spyware stealer

Malware Config

Extracted

Family

redline

Botnet

51

C2

193.106.191.182:23196

Attributes

auth_value
21351f5b8358ade7446b0c10ec81735e

Targets

- Target
  
  4a00550c9dbe3cc73c8a70e2eb3da630b93326f1951c8ca48945d09a007ba45f
- Size
  
  399KB
- MD5
  
  175ce07deae1048297f8c6bb02bbc7ff
- SHA1
  
  ccabbbfa5618f91f33221318fae7ed287f5ea391
- SHA256
  
  4a00550c9dbe3cc73c8a70e2eb3da630b93326f1951c8ca48945d09a007ba45f
- SHA512
  
  a9acab23a6f35dfa9df67050d90d4fab51267fac6be7ca8a96f9cab558b6498518d36e369a6a8e840f0f6209e1f16242cdca36093b3c35460eded24166b8c46f
Score

10^/10

redline 51 discovery infostealer spyware stealer
- RedLine
  RedLine Stealer is a malware family written in C#, first appearing in early 2020.
  infostealer redline
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

redline51discoveryinfostealerspywarestealer