General

  • Target
    0297c11c91595bb24d1a04c866e9a25f.exe
  • Size 352KB
  • Sample230813-ebmdfsgh78
  • SHA256 6dbf5bd3cc04522f3a9a8694ccef864b3abc2e63f4d553b9a68ace16d9666f65
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • redline

Botnet
  • LogsDiller Cloud (TG: @logsdillabot)

C2
  • 51.83.170.21:19447

Attributes
  • auth_value

    3a050df92d0cf082b2cdaf87863616be

Targets

    • Target
      0297c11c91595bb24d1a04c866e9a25f.exe
    • Size 352KB
    • SHA256 6dbf5bd3cc04522f3a9a8694ccef864b3abc2e63f4d553b9a68ace16d9666f65
    • MD5 SHA1 SHA512 SSDEEP
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v15

Tasks