General
- Target SecuriteInfo.com.W32.AIDetect.malware1.470.7334
- Size 329KB
- Sample210728-8brs2cmt3a
- SHA256 fca68250f0af2ea4d2ae1747c92b89e67799cd41db4b6dfe8eed57cdcf1cb07b
- MD5 74b6287a45b3fe5949ffa87f2019f1b2
- SHA1 2e4a5b48a0e0012b1469d73b373b23e4cbdd6595
- SHA512 6877b4660733575bbf87af0366a44199d9e7b633c7de82e2bddf54a507621651df585da186154a7a3b5fb5b57fefd24bafeb9ae14d742e4843b6d34d65934654
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.AIDetect.malware1.470.7334.exe
Resource
win7v20210410
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
170
C2
-
147.124.222.75:42864
Targets
-
- Target SecuriteInfo.com.W32.AIDetect.malware1.470.7334
- Size 329KB
- SHA256 fca68250f0af2ea4d2ae1747c92b89e67799cd41db4b6dfe8eed57cdcf1cb07b
- MD5 74b6287a45b3fe5949ffa87f2019f1b2
- SHA1 2e4a5b48a0e0012b1469d73b373b23e4cbdd6595
- SHA512 6877b4660733575bbf87af0366a44199d9e7b633c7de82e2bddf54a507621651df585da186154a7a3b5fb5b57fefd24bafeb9ae14d742e4843b6d34d65934654
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.