redline | 503fa44bcc019c6cfe057f3cb5915700e1d714532261567cac2ab8e603a8034a | Triage

Sharing

General

Target

503fa44bcc019c6cfe057f3cb5915700e1d714532261567cac2ab8e603a8034a
Size

405KB
Sample

220524-3bvxlabdd5
MD5

19a7ab143a0c0fb7fc335a6aed9dcb3f
SHA1

7e025297f990faf1b94dd05b1c4bdbc92332f7ee
SHA256

503fa44bcc019c6cfe057f3cb5915700e1d714532261567cac2ab8e603a8034a
SHA512

ac1580ee7cbe97fb4c8d787688aff9c38213c7cb9a64454fe2efb01f58d46227f6f71de893c11e4a2945cf1d1cf231c09f0fd4251ca7b574c6ae5a175b2c8fa4

Score

10^/10

redline top discovery infostealer spyware stealer

Malware Config

Extracted

Family

redline

Botnet

top

C2

185.215.113.75:81

Attributes

auth_value
ff6259bc2baf33b54b454aad484fb0ee

Targets

- Target
  
  503fa44bcc019c6cfe057f3cb5915700e1d714532261567cac2ab8e603a8034a
- Size
  
  405KB
- MD5
  
  19a7ab143a0c0fb7fc335a6aed9dcb3f
- SHA1
  
  7e025297f990faf1b94dd05b1c4bdbc92332f7ee
- SHA256
  
  503fa44bcc019c6cfe057f3cb5915700e1d714532261567cac2ab8e603a8034a
- SHA512
  
  ac1580ee7cbe97fb4c8d787688aff9c38213c7cb9a64454fe2efb01f58d46227f6f71de893c11e4a2945cf1d1cf231c09f0fd4251ca7b574c6ae5a175b2c8fa4
Score

10^/10

redline top discovery infostealer spyware stealer
- RedLine
  RedLine Stealer is a malware family written in C#, first appearing in early 2020.
  infostealer redline
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

redlinetopdiscoveryinfostealerspywarestealer