8d1adb00235372b1504e7c220a240d489f12ea0ef91edc4d545a4197c14309c6

General
Target

8d1adb00235372b1504e7c220a240d489f12ea0ef91edc4d545a4197c14309c6

Size

415KB

Sample

220521-vxb3lsdfdl

Score
10 /10
MD5

5ee2efb60d264de97168cabeb2ac48d0

SHA1

0d4378cf748f43e80a93c101645ab2f20321b6be

SHA256

8d1adb00235372b1504e7c220a240d489f12ea0ef91edc4d545a4197c14309c6

SHA512

eedfbb2386f7f19b1b434a6da3ba940acc9593a6dd6fbf681c9480acb0a794c2ee3896e1ff1be74b08bd47eedf1c3dcf5d7c42228387e2acf659d83485240f96

Malware Config

Extracted

Family redline
Botnet Ruzki
C2

193.233.48.58:38989

Attributes
auth_value
80c38cc7772c328c028b0e4f42a3fac6
Targets
Target

8d1adb00235372b1504e7c220a240d489f12ea0ef91edc4d545a4197c14309c6

MD5

5ee2efb60d264de97168cabeb2ac48d0

Filesize

415KB

Score
10/10
SHA1

0d4378cf748f43e80a93c101645ab2f20321b6be

SHA256

8d1adb00235372b1504e7c220a240d489f12ea0ef91edc4d545a4197c14309c6

SHA512

eedfbb2386f7f19b1b434a6da3ba940acc9593a6dd6fbf681c9480acb0a794c2ee3896e1ff1be74b08bd47eedf1c3dcf5d7c42228387e2acf659d83485240f96

Tags

Signatures

  • RedLine

    Description

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    Tags

  • RedLine Payload

  • Reads user/profile data of web browsers

    Description

    Infostealers often target stored browser data, which can include saved credentials etc.

    Tags

    TTPs

    Data from Local SystemCredentials in Files
  • Accesses cryptocurrency files/wallets, possible credential harvesting

    Tags

    TTPs

    Data from Local SystemCredentials in Files
  • Checks installed software on the system

    Description

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    Tags

    TTPs

    Query Registry

Related Tasks

MITRE ATT&CK Matrix
Command and Control
    Credential Access
    Defense Evasion
      Discovery
      Execution
        Exfiltration
          Impact
            Initial Access
              Lateral Movement
                Persistence
                  Privilege Escalation
                    Tasks