🐾 - 🚨 Windows 🪟 computer sending informations to RedLine Stealer 💀 C2 - Leak 🚱

SID: 3300726Rev: 21 views
Sourcepawpatrules
CreatedAugust 15, 2023
UpdatedAugust 16, 2023
Classificationtrojan-activity
alert tcp any any -> $EXTERNAL_NET any (msg:"🐾 - 🚨 Windows 🪟 computer sending informations to RedLine Stealer 💀 C2 - Leak 🚱"; flow:to_server, stateless; content:"Windows"; content:"Name:"; content:".exe|2c| CommandLine:"; fast_pattern; pcre:"/F-..ID:/"; content:"Total of RAM"; reference:url,https://malpedia.caad.fkie.fraunhofer.de/details/win.redline_stealer; reference:url,https://www.bitdefender.com/files/News/CaseStudies/study/415/Bitdefender-PR-Whitepaper-RedLine-creat6109-en-EN.pdf; target:src_ip; metadata:affected_product Windows_XP_Vista_7_8_10_11_Server_32_64_Bit, attack_target Client_Endpoint, created_at 2023_08_15, updated_at 2023_08_16; sid:3300726; rev:2; classtype:trojan-activity;)

References

urlhttps://malpedia.caad.fkie.fraunhofer.de/details/win.redline_stealer
urlhttps://www.bitdefender.com/files/News/CaseStudies/study/415/Bitdefender-PR-Whitepaper-RedLine-creat6109-en-EN.pdf

Metadata

affected productWindows_XP_Vista_7_8_10_11_Server_32_64_Bit
attack targetClient_Endpoint
created at2023_08_15
updated at2023_08_16

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!