General

  • Target

    https://youareanidiot.cc//

  • Sample

    230105-nrkz1afc71

Malware Config

Extracted

Family

redline

C2

176.113.115.7:2883

Attributes
  • auth_value

    87f94758d19dac61779b8e029452d79a

Targets

    • Target

      https://youareanidiot.cc//

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Executes dropped EXE

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks