redline | 228d06eaa5ffeee17f97d8aee413a6abeeb94960f96ad78e8e93d11875df47a1 | Triage

Sharing

General

Target

228d06eaa5ffeee17f97d8aee413a6abeeb94960f96ad78e8e93d11875df47a1
Size

292KB
Sample

220526-tw4wkachh6
MD5

178b6982d97bba99c655f66246b17dcb
SHA1

b4070a883da538eabc1b8b27d4391ef08fc70bf0
SHA256

228d06eaa5ffeee17f97d8aee413a6abeeb94960f96ad78e8e93d11875df47a1
SHA512

3f5c6cde4ae2e0504f18d2766c551668eef4e641b2b55e42250cb9526a6c2a68ecb702d47815ad86a9b1f69d677ae38718ffaeeb56fae374eb715c1812dbbd48

Score

10^/10

redline top discovery infostealer spyware stealer

Malware Config

Extracted

Family

redline

Botnet

top

C2

185.215.113.75:81

Attributes

auth_value
ff6259bc2baf33b54b454aad484fb0ee

Targets

- Target
  
  228d06eaa5ffeee17f97d8aee413a6abeeb94960f96ad78e8e93d11875df47a1
- Size
  
  292KB
- MD5
  
  178b6982d97bba99c655f66246b17dcb
- SHA1
  
  b4070a883da538eabc1b8b27d4391ef08fc70bf0
- SHA256
  
  228d06eaa5ffeee17f97d8aee413a6abeeb94960f96ad78e8e93d11875df47a1
- SHA512
  
  3f5c6cde4ae2e0504f18d2766c551668eef4e641b2b55e42250cb9526a6c2a68ecb702d47815ad86a9b1f69d677ae38718ffaeeb56fae374eb715c1812dbbd48
Score

10^/10

redline top discovery infostealer spyware stealer
- RedLine
  RedLine Stealer is a malware family written in C#, first appearing in early 2020.
  infostealer redline
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

redlinetopdiscoveryinfostealerspywarestealer