═══════════════════════════════════════════════════════════════ [INFOSTEALER LOG - REDLINE v2.8 - BRAZIL JUSTICE SYSTEM] ═══════════════════════════════════════════════════════════════ [TIMESTAMP]: 2026-03-22 14:32:18 UTC [VICTIM_IP]: 189.45.123.67 [OS]: Windows 10 Pro x64 [INFECTED_FILE]: C:\Users\victi\Downloads\Avast.exe ═══════════════════════════════════════════════════════════════ [CREDENTIALS DUMP - CNJ.JUS.BR] =================================================== [BROWSER]: Chrome/124.0.0.0 [PROFILE]: Default [URL]: https://www.cnj.jus.br/corporativo/ [USERNAME]: 03057448445 [PASSWORD]: Gilvan@161277 [FORM_ACTION]: /corporativo/auth/login [SESSION_ID]: cnj_sess_03057448445_20260322143218 [CAPTURED]: 2026-03-22 14:32:18 [BROWSER]: Firefox/125.0 [PROFILE]: user-default [URL]: https://apostil.cnj.jus.br/pt/login [USERNAME]: 290.041.038-05 [PASSWORD]: superdoor38 [FORM_ACTION]: /pt/login/auth [SESSION_ID]: apostil_sess_29004103805_20260322143219 [CAPTURED]: 2026-03-22 14:32:19 [BROWSER]: Chrome/124.0.0.0 [PROFILE]: Default [URL]: https://cnj.jus.br/eadcnj/login/index.php [USERNAME]: 87959828253 [PASSWORD]: bruck10* [FORM_ACTION]: /eadcnj/login/auth [SESSION_ID]: eadcnj_sess_87959828253_20260322143220 [CAPTURED]: 2026-03-22 14:32:20 [BROWSER]: Chrome/124.0.0.0 [PROFILE]: Default [URL]: https://cnj.jus.br/eadcnj/login/index.php [USERNAME]: 85097136268 [PASSWORD]: 272599K1 [FORM_ACTION]: /eadcnj/login/auth [SESSION_ID]: eadcnj_sess_85097136268_20260322143221 [CAPTURED]: 2026-03-22 14:32:21 [BROWSER]: Chrome/124.0.0.0 [PROFILE]: Default [URL]: https://cnj.jus.br/eadcnj/login/index.php [USERNAME]: 27750651802 [PASSWORD]: lara2007 [FORM_ACTION]: /eadcnj/login/auth [SESSION_ID]: eadcnj_sess_27750651802_20260322143222 [CAPTURED]: 2026-03-22 14:32:22 [BROWSER]: Chrome/124.0.0.0 [PROFILE]: Default [URL]: https://cnj.jus.br/eadcnj/login/index.php [USERNAME]: 25563243842 [PASSWORD]: biza2016 [FORM_ACTION]: /eadcnj/login/auth [SESSION_ID]: eadcnj_sess_25563243842_20260322143223 [CAPTURED]: 2026-03-22 14:32:23 [BROWSER]: Chrome/124.0.0.0 [PROFILE]: Default [URL]: https://cnj.jus.br/eadcnj/login/index.php [USERNAME]: 10895386429 [PASSWORD]: xld2j6dg [FORM_ACTION]: /eadcnj/login/auth [SESSION_ID]: eadcnj_sess_10895386429_20260322143224 [CAPTURED]: 2026-03-22 14:32:24 [BROWSER]: Chrome/124.0.0.0 [PROFILE]: Default [URL]: https://cnj.jus.br/eadcnj/login/index.php [USERNAME]: 10521927935 [PASSWORD]: vi@@2013 [FORM_ACTION]: /eadcnj/login/auth [SESSION_ID]: eadcnj_sess_10521927935_20260322143225 [CAPTURED]: 2026-03-22 14:32:25 [BROWSER]: Chrome/124.0.0.0 [PROFILE]: Default [URL]: https://cnj.jus.br/eadcnj/login/index.php [USERNAME]: 07476173686 [PASSWORD]: kaka9410 [FORM_ACTION]: /eadcnj/login/auth [SESSION_ID]: eadcnj_sess_07476173686_20260322143226 [CAPTURED]: 2026-03-22 14:32:26 [BROWSER]: Chrome/124.0.0.0 [PROFILE]: Default [URL]: https://cnj.jus.br/eadcnj/login/index.php [USERNAME]: 07285714984 [PASSWORD]: rapha445 [FORM_ACTION]: /eadcnj/login/auth [SESSION_ID]: eadcnj_sess_07285714984_20260322143227 [CAPTURED]: 2026-03-22 14:32:27 [BROWSER]: Chrome/124.0.0.0 [PROFILE]: Default [URL]: https://cnj.jus.br/eadcnj/login/index.php [USERNAME]: 04246014516 [PASSWORD]: 199316ba [FORM_ACTION]: /eadcnj/login/auth [SESSION_ID]: eadcnj_sess_04246014516_20260322143228 [CAPTURED]: 2026-03-22 14:32:28 [BROWSER]: Chrome/124.0.0.0 [PROFILE]: Default [URL]: https://cnj.jus.br/eadcnj/login/index.php [USERNAME]: 02501242548 [PASSWORD]: lbm18043 [FORM_ACTION]: /eadcnj/login/auth [SESSION_ID]: eadcnj_sess_02501242548_20260322143229 [CAPTURED]: 2026-03-22 14:32:29 [BROWSER]: Chrome/124.0.0.0 [PROFILE]: Default [URL]: https://cnj.jus.br/eadcnj/login/index.php [USERNAME]: 02377057101 [PASSWORD]: aramaico [FORM_ACTION]: /eadcnj/login/auth [SESSION_ID]: eadcnj_sess_02377057101_20260322143230 [CAPTURED]: 2026-03-22 14:32:30 [BROWSER]: Chrome/124.0.0.0 [PROFILE]: Default [URL]: https://cnj.jus.br/eadcnj/login/index.php [USERNAME]: 00795614977 [PASSWORD]: 97894325 [FORM_ACTION]: /eadcnj/login/auth [SESSION_ID]: eadcnj_sess_00795614977_20260322143231 [CAPTURED]: 2026-03-22 14:32:31 [BROWSER]: Chrome/124.0.0.0 [PROFILE]: Default [URL]: https://cnj.jus.br/eadcnj/login/index.php [USERNAME]: 00357237005 [PASSWORD]: alhe2702 [FORM_ACTION]: /eadcnj/login/auth [SESSION_ID]: eadcnj_sess_00357237005_20260322143232 [CAPTURED]: 2026-03-22 14:32:32 [BROWSER]: Firefox/125.0 [PROFILE]: user-default [URL]: https://cnj.jus.br/corporativo/index.php [USERNAME]: 10275863840 [PASSWORD]: Meleca-01 [FORM_ACTION]: /corporativo/auth/login [SESSION_ID]: cnj_sess_10275863840_20260322143233 [CAPTURED]: 2026-03-22 14:32:33 [BROWSER]: Firefox/125.0 [PROFILE]: user-default [URL]: https://cnj.jus.br/corporativo/index.php [USERNAME]:????? [PASSWORD]: 24125000d [FORM_ACTION]: /corporativo/auth/login [SESSION_ID]: cnj_sess_00093892616_20260322143234 [CAPTURED]: 2026-03-22 14:32:34 ═══════════════════════════════════════════════════════════════ [SYSTEM INFORMATION] ===================================== [COMPUTER_NAME]: DESKTOP-ABCD123 [USER_ACCOUNT]: victim_user [ADMIN_RIGHTS]: YES [ANTIVIRUS]: Avast Free Antivirus (DISABLED) [FIREWALL]: Windows Firewall (DISABLED) [LAST_LOGIN]: 2026-03-22 08:15:42 ═══════════════════════════════════════════════════════════════ [NETWORK SCAN RESULTS] ===================================== [LOCAL_IP]: 192.16?????? [MAC_ADDRESS]: 00:1A:2B:3C:4D:5E [DNS_SERVERS]: 8.8.8.8, 8.8.4.4 [GATEWAY]: 192.1????? ═══════════════════════════════════════════════════════════════ [ADDITIONAL DATA] ===================================== [COOKIES_FOUND]: 47 [AUTOLOGIN_ENABLED]: YES [PASSWORD_MANAGER]: LastPass (ENCRYPTED - KEYLOGGED) [SCREEN_RESOLUTION]: 1920x1080 [KEYBOARD_LAYOUT]: Portuguese (Brazilian) ═══════════════════════════════════════════════════════════════ [EXPORT STATISTICS] ===================================== [TOTAL_CREDENTIALS]: 17 [UNIQUE_DOMAINS]: 3 [CHROME_PROFILES]: 1 [FIREFOX_PROFILES]: 1 [EXPORT_FORMAT]: JSON + TXT [COMPRESSION]: ZIP (ENCRYPTED) [EXPORT_TIME]: 2026-03-22 14:32:35 ═══════════════════════════════════════════════════════════════ [C2 COMMUNICATION] ===================================== [SERVER]: 198.51.100.?????? [PROTOCOL]: HTTPS/AES256 [STATUS]: CONNECTED [LAST_BEACON]: 2026-03-22 14:32:36 [NEXT_BEACON]: 2026-03-22 14:37:36 ═══════════════════════════════════════════════════════════════ [EXPLOITATION STATUS] ===================================== [DATA_EXFILTRATED]: YES [BACKDOOR_INSTALLED]: YES [PERSISTENCE]: Registry + Scheduled Task [KEYLOGGER]: ACTIVE [WEBCAM_ACCESS]: ENABLED [MICROPHONE_ACCESS]: ENABLED ═══════════════════════════════════════════════════════════════ [END OF LOG - REDLINE v2.8] [SESSION_ID]: REDLINE_20260322_143236_BRAZIL_JUSTICE [OPERATOR]: UNKNOWN [STATUS]: COMPLETE