General

  • Target
    c7dd7c1133fa427cef581f7976988d52.exe
  • Size 334KB
  • Sample220606-rcpanadagk
  • SHA256 dda213bc80c8c82fc91d412150ee4a02cc9639eacc9f9ca008a9b4edb4fdc0c8
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • redline

Botnet
  • x1010x

C2
  • doaisunto.xyz:26414

  • olmilllchi.xyz:26414

Attributes
  • auth_value

    ad926fa7ebe66d8abd73e52a905302ca

Targets

    • Target
      c7dd7c1133fa427cef581f7976988d52.exe
    • Size 334KB
    • SHA256 dda213bc80c8c82fc91d412150ee4a02cc9639eacc9f9ca008a9b4edb4fdc0c8
    • MD5 SHA1 SHA512
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks