redline | 9566ef0986d5c2065cddb538b348874c6c460b9d13f017aca76d2fb4e5ad061b | Triage

Sharing

General

Target

9566ef0986d5c2065cddb538b348874c6c460b9d13f017aca76d2fb4e5ad061b
Size

413KB
Sample

220528-pftcnscge9
MD5

3fbdf844460430371300862dca04a638
SHA1

a05576b034ccea63dd56566cb313ad596a6f2331
SHA256

9566ef0986d5c2065cddb538b348874c6c460b9d13f017aca76d2fb4e5ad061b
SHA512

e5fe393a66f661d362be87fffff3563dcaac417c3e5ecfabb59fbe8a75c74361168a1edba780ae59f3b525176be76dbd979dc589022930b5c56d37d7c0e36b55

Score

10^/10

redline top discovery infostealer spyware stealer

Malware Config

Extracted

Family

redline

Botnet

top

C2

185.215.113.75:81

Attributes

auth_value
ff6259bc2baf33b54b454aad484fb0ee

Targets

- Target
  
  9566ef0986d5c2065cddb538b348874c6c460b9d13f017aca76d2fb4e5ad061b
- Size
  
  413KB
- MD5
  
  3fbdf844460430371300862dca04a638
- SHA1
  
  a05576b034ccea63dd56566cb313ad596a6f2331
- SHA256
  
  9566ef0986d5c2065cddb538b348874c6c460b9d13f017aca76d2fb4e5ad061b
- SHA512
  
  e5fe393a66f661d362be87fffff3563dcaac417c3e5ecfabb59fbe8a75c74361168a1edba780ae59f3b525176be76dbd979dc589022930b5c56d37d7c0e36b55
Score

10^/10

redline top discovery infostealer spyware stealer
- RedLine
  RedLine Stealer is a malware family written in C#, first appearing in early 2020.
  infostealer redline
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

redlinetopdiscoveryinfostealerspywarestealer