General

  • Target

    8bf420fb51c41fa2d934886ca711293ac67b72f3fa3a95ecbc5504ece15ce41c

  • Size

    255KB

  • Sample

    230616-c716dace49

  • MD5

    e64e7ff5b0d036a4a78a4f945ada7aef

  • SHA1

    4dbad6e84ae25c0ecf9057f0b781a334fd3bcf81

  • SHA256

    8bf420fb51c41fa2d934886ca711293ac67b72f3fa3a95ecbc5504ece15ce41c

  • SHA512

    423bcfcce3db5607ad02f7ec3fd815e26d371f75c55ebb517f86fa3aa2033a80d2e413890d392c89f2aaba7eddaf13cbacbfd9cb4490fcdcf86913cc2f42fe0a

  • SSDEEP

    6144:LQpWVr0TZC4xR4aPYaD4hYhJWJSW/Vevk:LEm0TZCO4r7

Malware Config

Extracted

Family

redline

Botnet

joker

C2

83.97.73.130:19061

Attributes
  • auth_value

    a98d303cc28bb3b32a23c59214ae3bc0

Targets

    • Target

      8bf420fb51c41fa2d934886ca711293ac67b72f3fa3a95ecbc5504ece15ce41c

    • Size

      255KB

    • MD5

      e64e7ff5b0d036a4a78a4f945ada7aef

    • SHA1

      4dbad6e84ae25c0ecf9057f0b781a334fd3bcf81

    • SHA256

      8bf420fb51c41fa2d934886ca711293ac67b72f3fa3a95ecbc5504ece15ce41c

    • SHA512

      423bcfcce3db5607ad02f7ec3fd815e26d371f75c55ebb517f86fa3aa2033a80d2e413890d392c89f2aaba7eddaf13cbacbfd9cb4490fcdcf86913cc2f42fe0a

    • SSDEEP

      6144:LQpWVr0TZC4xR4aPYaD4hYhJWJSW/Vevk:LEm0TZCO4r7

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks