General

  • Target
    a91bc778c643710d36b72dad8721937e.exe
  • Size 318KB
  • Sample230613-2zh29scb38
  • SHA256 5524ca02c5f2cc4add6ef62eda26ce11c2d3ef5560f472a274d3c3a2f2c68e86
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • redline

Botnet
  • rovno

C2
  • 83.97.73.130:19061

Attributes
  • auth_value

    88306b072bfae0d9e44ed86a222b439d

Targets

    • Target
      a91bc778c643710d36b72dad8721937e.exe
    • Size 318KB
    • SHA256 5524ca02c5f2cc4add6ef62eda26ce11c2d3ef5560f472a274d3c3a2f2c68e86
    • MD5 SHA1 SHA512 SSDEEP
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks