General
- Target 84482ccc25d8732c2a33b2e731f53368.exe
- Size 348KB
- Sample210609-atagplk512
- SHA256 c8cbc34e33ac2d253932ce0767a96d461b40e70c0dc1dd0e1ac386d262328fa9
- MD5 84482ccc25d8732c2a33b2e731f53368
- SHA1 24668ee2537bc9a1130a39a57a6905a3b2ef4542
- SHA512 4defe42ac2ee0c9914f955abb47cc34119a1b87d585cada7e31e1d167f9a8cb6b4d873e99d4ff80bf6026d216998c1fdccdc19e7a7791d0478492f1f4528c4af
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
84482ccc25d8732c2a33b2e731f53368.exe
Resource
win7v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
MIX 09.06
C2
-
185.215.113.17:18597
Targets
-
- Target 84482ccc25d8732c2a33b2e731f53368.exe
- Size 348KB
- SHA256 c8cbc34e33ac2d253932ce0767a96d461b40e70c0dc1dd0e1ac386d262328fa9
- MD5 84482ccc25d8732c2a33b2e731f53368
- SHA1 24668ee2537bc9a1130a39a57a6905a3b2ef4542
- SHA512 4defe42ac2ee0c9914f955abb47cc34119a1b87d585cada7e31e1d167f9a8cb6b4d873e99d4ff80bf6026d216998c1fdccdc19e7a7791d0478492f1f4528c4af
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.