General

  • Target

    0x00080000000122e6-1063.dat

  • Size

    175KB

  • Sample

    230326-sr14faah6z

  • MD5

    89bc498738875984d9d2cf871ce66c2f

  • SHA1

    cd3218588a0fe6827192bf77913186b15262fac2

  • SHA256

    01c938160e2b4b631ea08cd73be1872673853a634d133deb5757ee3008f0f378

  • SHA512

    1c19b9c612706439962a7448a4ee017e08a2cad99eb5a34994384a6ef5d1c32f1f8439e6c0ba2cc148a010df2023e221f5ca45e3bac80180cb69dcd5824709fa

  • SSDEEP

    3072:ZxqZWjfa8oty3s5vZllel5Fih1vxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOus:LqZC0hMih

Malware Config

Extracted

Family

redline

Botnet

braza

C2

193.233.20.32:4125

Attributes
  • auth_value

    ebe61b54deeef75cf8466416c0857088

Targets

    • Target

      0x00080000000122e6-1063.dat

    • Size

      175KB

    • MD5

      89bc498738875984d9d2cf871ce66c2f

    • SHA1

      cd3218588a0fe6827192bf77913186b15262fac2

    • SHA256

      01c938160e2b4b631ea08cd73be1872673853a634d133deb5757ee3008f0f378

    • SHA512

      1c19b9c612706439962a7448a4ee017e08a2cad99eb5a34994384a6ef5d1c32f1f8439e6c0ba2cc148a010df2023e221f5ca45e3bac80180cb69dcd5824709fa

    • SSDEEP

      3072:ZxqZWjfa8oty3s5vZllel5Fih1vxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOus:LqZC0hMih

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.