bc9efb9a8d8073d39ccd22ac5260b565b16668fb3e819ed9642f5f9737b3d50e

General
Target

bc9efb9a8d8073d39ccd22ac5260b565b16668fb3e819ed9642f5f9737b3d50e

Size

407KB

Sample

220521-tg4bgsaaf4

Score
10 /10
MD5

5bb513cf9d1066060ebf49b02612559b

SHA1

a4b374299a26a17f14c2b5c13baca342b73a8ea6

SHA256

bc9efb9a8d8073d39ccd22ac5260b565b16668fb3e819ed9642f5f9737b3d50e

SHA512

4f13a99c6316059f1da8b55c55582aa87fcaed28801af39acdd3ac0f0293bd86806e019805630e3899fd3486434f1eab35bf40902c8fd73a19a0fc58bc01fa7d

Malware Config

Extracted

Family redline
Botnet test1
C2

185.215.113.75:80

Attributes
auth_value
7ab4a4e2eae9eb7ae10f64f68df53bb3
Targets
Target

bc9efb9a8d8073d39ccd22ac5260b565b16668fb3e819ed9642f5f9737b3d50e

MD5

5bb513cf9d1066060ebf49b02612559b

Filesize

407KB

Score
10/10
SHA1

a4b374299a26a17f14c2b5c13baca342b73a8ea6

SHA256

bc9efb9a8d8073d39ccd22ac5260b565b16668fb3e819ed9642f5f9737b3d50e

SHA512

4f13a99c6316059f1da8b55c55582aa87fcaed28801af39acdd3ac0f0293bd86806e019805630e3899fd3486434f1eab35bf40902c8fd73a19a0fc58bc01fa7d

Tags

Signatures

  • RedLine

    Description

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    Tags

  • Reads user/profile data of web browsers

    Description

    Infostealers often target stored browser data, which can include saved credentials etc.

    Tags

    TTPs

    Data from Local SystemCredentials in Files
  • Accesses cryptocurrency files/wallets, possible credential harvesting

    Tags

    TTPs

    Data from Local SystemCredentials in Files
  • Checks installed software on the system

    Description

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    Tags

    TTPs

    Query Registry

Related Tasks

MITRE ATT&CK Matrix
Command and Control
    Credential Access
    Defense Evasion
      Discovery
      Execution
        Exfiltration
          Impact
            Initial Access
              Lateral Movement
                Persistence
                  Privilege Escalation
                    Tasks