redline | 389d21fc20160a91cbe2d82cf6202cdaae8e61cdca532b9da6c79cd030c35c14 | Triage

Sharing

General

Target

389d21fc20160a91cbe2d82cf6202cdaae8e61cdca532b9da6c79cd030c35c14
Size

392KB
Sample

220527-ytr67sahg3
MD5

95d88c941ed1fd20836fe2140bc63a55
SHA1

8568e5032cb82c8bcc0e97fb6f366401c31e0e2c
SHA256

389d21fc20160a91cbe2d82cf6202cdaae8e61cdca532b9da6c79cd030c35c14
SHA512

e0abd1cd5dd81ba03ecb03c549548e57d2f5d98a38c17ff9c12e59d456318f3f5c194256fe834b5043c225e8a189103cdd68ecfeae1c6423a8372dc6b9bb7d45

Score

10^/10

redline top discovery infostealer spyware stealer

Malware Config

Extracted

Family

redline

Botnet

top

C2

185.215.113.75:81

Attributes

auth_value
ff6259bc2baf33b54b454aad484fb0ee

Targets

- Target
  
  389d21fc20160a91cbe2d82cf6202cdaae8e61cdca532b9da6c79cd030c35c14
- Size
  
  392KB
- MD5
  
  95d88c941ed1fd20836fe2140bc63a55
- SHA1
  
  8568e5032cb82c8bcc0e97fb6f366401c31e0e2c
- SHA256
  
  389d21fc20160a91cbe2d82cf6202cdaae8e61cdca532b9da6c79cd030c35c14
- SHA512
  
  e0abd1cd5dd81ba03ecb03c549548e57d2f5d98a38c17ff9c12e59d456318f3f5c194256fe834b5043c225e8a189103cdd68ecfeae1c6423a8372dc6b9bb7d45
Score

10^/10

redline top discovery infostealer spyware stealer
- RedLine
  RedLine Stealer is a malware family written in C#, first appearing in early 2020.
  infostealer redline
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

redlinetopdiscoveryinfostealerspywarestealer