69f519741f2e0b6ba467573dcaf917944875b746c8e7f5105670ee28487e0330

General
Target

69f519741f2e0b6ba467573dcaf917944875b746c8e7f5105670ee28487e0330

Size

413KB

Sample

220623-sm717agdf6

Score
10 /10
MD5

e1e03c5fd950b7e5a22a46d222d212ab

SHA1

94ae9d31f2a6585f7cb1e215fdc94a74edc47de4

SHA256

69f519741f2e0b6ba467573dcaf917944875b746c8e7f5105670ee28487e0330

SHA512

623747426d5c958256dbd5c20e9236f97cffbb3d6364129a3dbb48c43fcbab0239a110d645c5cbbc165db3bb4ca322c296967eab0898df999e4050110d151d61

Malware Config

Extracted

Family redline
Botnet RUZKI
C2

193.106.191.246:23196

Attributes
auth_value
121027c094f768a0a0e9b562f6417952
Targets
Target

69f519741f2e0b6ba467573dcaf917944875b746c8e7f5105670ee28487e0330

MD5

e1e03c5fd950b7e5a22a46d222d212ab

Filesize

413KB

Score
10/10
SHA1

94ae9d31f2a6585f7cb1e215fdc94a74edc47de4

SHA256

69f519741f2e0b6ba467573dcaf917944875b746c8e7f5105670ee28487e0330

SHA512

623747426d5c958256dbd5c20e9236f97cffbb3d6364129a3dbb48c43fcbab0239a110d645c5cbbc165db3bb4ca322c296967eab0898df999e4050110d151d61

Tags

Signatures

  • RedLine

    Description

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    Tags

  • Reads user/profile data of web browsers

    Description

    Infostealers often target stored browser data, which can include saved credentials etc.

    Tags

    TTPs

    Data from Local SystemCredentials in Files
  • Accesses cryptocurrency files/wallets, possible credential harvesting

    Tags

    TTPs

    Data from Local SystemCredentials in Files
  • Checks installed software on the system

    Description

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    Tags

    TTPs

    Query Registry

Related Tasks

MITRE ATT&CK Matrix
Command and Control
    Credential Access
    Defense Evasion
      Discovery
      Execution
        Exfiltration
          Impact
            Initial Access
              Lateral Movement
                Persistence
                  Privilege Escalation
                    Tasks