General

  • Target
    a3e0afc4f566d77ed6a131c02869aec391da7b01cef8d07e51f729a4a36d77ae_JC.exe
  • Size 328KB
  • Sample230815-tb3srsbf32
  • SHA256 a3e0afc4f566d77ed6a131c02869aec391da7b01cef8d07e51f729a4a36d77ae
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • redline

Botnet
  • LogsDiller Cloud (TG: @logsdillabot)

C2
  • 51.83.170.21:19447

Attributes
  • auth_value

    3a050df92d0cf082b2cdaf87863616be

Targets

    • Target
      a3e0afc4f566d77ed6a131c02869aec391da7b01cef8d07e51f729a4a36d77ae_JC.exe
    • Size 328KB
    • SHA256 a3e0afc4f566d77ed6a131c02869aec391da7b01cef8d07e51f729a4a36d77ae
    • MD5 SHA1 SHA512 SSDEEP
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v15

Tasks