General
- Target 5ce42e14893624a543f4fd407c054866.exe
- Size 330KB
- Sample210729-cwe9cjhe42
- SHA256 8b2b689999ceb3c815eebb3b53961aa2a13bf9e4647f8b074c726a535781aa94
- MD5 5ce42e14893624a543f4fd407c054866
- SHA1 e7a8b0a4f15ba45394df9e97c5ed115a3fea289f
- SHA512 ec6d30b44bf81c6bb56f7099b205c673f13e21188948acf8f6db3048c3f23709b80189dc2da3cf42d99b2671ff1166c3e2eaf402daf14e12855007e945c18b5a
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
5ce42e14893624a543f4fd407c054866.exe
Resource
win7v20210410
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
MIX 29.07
C2
-
185.215.113.17:18597
Targets
-
- Target 5ce42e14893624a543f4fd407c054866.exe
- Size 330KB
- SHA256 8b2b689999ceb3c815eebb3b53961aa2a13bf9e4647f8b074c726a535781aa94
- MD5 5ce42e14893624a543f4fd407c054866
- SHA1 e7a8b0a4f15ba45394df9e97c5ed115a3fea289f
- SHA512 ec6d30b44bf81c6bb56f7099b205c673f13e21188948acf8f6db3048c3f23709b80189dc2da3cf42d99b2671ff1166c3e2eaf402daf14e12855007e945c18b5a
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.