General

  • Target
    2784-58-0x0000000001C90000-0x0000000001CC4000-memory.dmp
  • Size 208KB
  • Sample230813-e7gsvabb7y
  • SHA256 eecc72d20c70deb80dcac3ea5fa59f5ed275ce1bd52da9e6901584dd980be9e7
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • redline

Botnet
  • LogsDiller Cloud (TG: @logsdillabot)

C2
  • 51.83.170.21:19447

Attributes
  • auth_value

    3a050df92d0cf082b2cdaf87863616be

Targets

    • Target
      2784-58-0x0000000001C90000-0x0000000001CC4000-memory.dmp
    • Size 208KB
    • SHA256 eecc72d20c70deb80dcac3ea5fa59f5ed275ce1bd52da9e6901584dd980be9e7
    • MD5 SHA1 SHA512 SSDEEP
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v15

Tasks