Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
5 IOCs

RedLine Stealer returns with New TTPS – Detection & Response

Security Investigation
Security Investigation
Published February 17, 2023Original Report

Threat Actors

Malware Families

Excerpt

Redline Stealer is a type of malware that steals sensitive information from infected computers. The malware is known for its ability to bypass antivirus software and remain undetected on a victim’s computer for an extended period. In this essay, we will discuss the Redline Stealer malware, its history, its capabilities, and its impact. Additionally, we will provide a flowchart that outlines the basic steps of the malware. Redline Stealer was first discovered in 2018 by…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYTurlaINFRASTRUCTURE176.113.115.17http://193.233.20.2/B…http://193.233.20.2/B…CAPABILITYMETA StealerRedLineVICTIMunknown
Adversary(1)
Infrastructure(4)
Capability(2)
Victim

Indicators of Compromise

Open the mindmap →

5 indicators

TypeIndicatorConfidenceScoreFirst Seen
IP176.113.115.17HighScore 64/100First seen
URLhttp://193.233.20.2/BN89HKU/PLUGINS/CLIP64.DLLHighScore 58/100First seen
SHA2563854f7f1fcb2dd48a235e69be3a7618bec6faf676c8af4fc3ad1d253dc653591MediumScore 53/100First seen
URLhttp://193.233.20.2/BN89HKU/INDEX.PHPHighScore 58/100First seen
IP193.233.20.13HighScore 58/100First seen

IOC Relationship Graph

Building graph…