General

  • Target
    ec1553d547a9d3837f888777788f25359c65c94f4f84ef06982f4a1dcf82648e
  • Size 327KB
  • Sample230809-3by91shf8x
  • SHA256 ec1553d547a9d3837f888777788f25359c65c94f4f84ef06982f4a1dcf82648e
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • redline

Botnet
  • LogsDiller Cloud (TG: @logsdillabot)

C2
  • 209.250.248.11:33522

Attributes
  • auth_value

    3a050df92d0cf082b2cdaf87863616be

Targets

    • Target
      ec1553d547a9d3837f888777788f25359c65c94f4f84ef06982f4a1dcf82648e
    • Size 327KB
    • SHA256 ec1553d547a9d3837f888777788f25359c65c94f4f84ef06982f4a1dcf82648e
    • MD5 SHA1 SHA512 SSDEEP
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v15

Tasks