General

  • Target
    aededd80c17865052eeb53e9cdc597ba.exe
  • Size 407KB
  • Sample220607-lnrx2ahbhk
  • SHA256 2da822010184f90da1d84769e99ca9347d25dbfad32a2d558a596c7e30315c3c
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • redline

Botnet
  • x777x

C2
  • doaisunto.xyz:26414

  • olmilllchi.xyz:26414

Attributes
  • auth_value

    2a40d458e12bd4704679a0bd46b37ddd

Targets

    • Target
      aededd80c17865052eeb53e9cdc597ba.exe
    • Size 407KB
    • SHA256 2da822010184f90da1d84769e99ca9347d25dbfad32a2d558a596c7e30315c3c
    • MD5 SHA1 SHA512
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks