General
- Target eb93a8d158d3c472ee6caf99bfd3aa2c.exe
- Size 398KB
- Sample210522-c4pdr2aqme
- SHA256 e64ecde487ecb44035cf435d457237a4f8b8cedbbe055fa1e6698ad2a3939fed
- MD5 eb93a8d158d3c472ee6caf99bfd3aa2c
- SHA1 fea5988b4383c9ff5043e8d1c479fe6dbcaa2ab8
- SHA512 eccff71dc5efc581247b414f091e2b17e2734c02269d30e8d1e815cddde133e9518b4ed3d4a7e50460269b2fbd091ed8258b6785a3cc3171bfab5cd6c5bfff93
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
eb93a8d158d3c472ee6caf99bfd3aa2c.exe
Resource
win7v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
MIX 22.05
C2
-
xisolenoy.xyz:80
Targets
-
- Target eb93a8d158d3c472ee6caf99bfd3aa2c.exe
- Size 398KB
- SHA256 e64ecde487ecb44035cf435d457237a4f8b8cedbbe055fa1e6698ad2a3939fed
- MD5 eb93a8d158d3c472ee6caf99bfd3aa2c
- SHA1 fea5988b4383c9ff5043e8d1c479fe6dbcaa2ab8
- SHA512 eccff71dc5efc581247b414f091e2b17e2734c02269d30e8d1e815cddde133e9518b4ed3d4a7e50460269b2fbd091ed8258b6785a3cc3171bfab5cd6c5bfff93
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.