Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
5 IOCs
RedLine Stealer returns with New TTPS – Detection & Response
Threat Actors
Malware Families
Excerpt
Redline Stealer is a type of malware that steals sensitive information from infected computers. The malware is known for its ability to bypass antivirus software and remain undetected on a victim’s computer for an extended period. In this essay, we will discuss the Redline Stealer malware, its history, its capabilities, and its impact. Additionally, we will provide a flowchart that outlines the basic steps of the malware. Redline Stealer was first discovered in 2018 by…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(4)
Capability(2)
Victim
Indicators of Compromise
Open the mindmap →5 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 176.113.115.17 | High | Score 64/100 | First seen |
| URL | http://193.233.20.2/BN89HKU/PLUGINS/CLIP64.DLL | High | Score 58/100 | First seen |
| SHA256 | 3854f7f1fcb2dd48a235e69be3a7618bec6faf676c8af4fc3ad1d253dc653591 | Medium | Score 53/100 | First seen |
| URL | http://193.233.20.2/BN89HKU/INDEX.PHP | High | Score 58/100 | First seen |
| IP | 193.233.20.13 | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…