General
-
Target
https://cdn.discordapp.com/attachments/959549137727131751/975900099341353030/Btcoin_Fake_Transaction_Lightning_Network_Full_Version_3.0.1.zip
-
Sample
220518-hy44kaegd4
Score
10/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://cdn.discordapp.com/attachments/959549137727131751/975900099341353030/Btcoin_Fake_Transaction_Lightning_Network_Full_Version_3.0.1.zip
Resource
win10-20220414-en
windows10_x64
0 signatures
0 seconds
Malware Config
Extracted
Family
redline
Botnet
WWW
C2
107.175.65.144:41825
Attributes
-
auth_value
7d1bba8fb955acb1069ea8f3dc8b82d7
Targets
-
-
Target
https://cdn.discordapp.com/attachments/959549137727131751/975900099341353030/Btcoin_Fake_Transaction_Lightning_Network_Full_Version_3.0.1.zip
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext
-