General
-
Target
https://bit.ly/40EzzTq
-
Sample
230401-qdr79sab75
Score
10/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://bit.ly/40EzzTq
Resource
win10-20230220-en
windows10-1703-x64
18 signatures
1800 seconds
Malware Config
Extracted
Family
redline
Botnet
@im_HiLLi
C2
37.220.87.8:42823
Attributes
-
auth_value
52bf9dde344e4860030827f790e28cca
Targets
-
-
Target
https://bit.ly/40EzzTq
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Adds Run key to start application
-