General
- Target 964d27f847238a3ff9b11f21d99aff90
- Size 98KB
- Sample210801-jwlpbwkdy2
- SHA256 dcaf58a74327239aff106eb7da1f06a9ad9bceeaad4e8a08496fa75f744e8f55
- MD5 964d27f847238a3ff9b11f21d99aff90
- SHA1 e93362db7119767bf6c13f96bb4fe6fa383c8c7c
- SHA512 fc088122ded30fa243d1baf4125537812c7b43a5efa8cb6cd6c6bedefb42afd11f09e3862e844c297d21398ad8c0d0a7c7c0f26e444b88e801d3656042a169f5
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
964d27f847238a3ff9b11f21d99aff90.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
964d27f847238a3ff9b11f21d99aff90.exe
Resource
win10v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
@Yuki4onna
C2
-
95.217.159.87:4348
Targets
-
- Target 964d27f847238a3ff9b11f21d99aff90
- Size 98KB
- SHA256 dcaf58a74327239aff106eb7da1f06a9ad9bceeaad4e8a08496fa75f744e8f55
- MD5 964d27f847238a3ff9b11f21d99aff90
- SHA1 e93362db7119767bf6c13f96bb4fe6fa383c8c7c
- SHA512 fc088122ded30fa243d1baf4125537812c7b43a5efa8cb6cd6c6bedefb42afd11f09e3862e844c297d21398ad8c0d0a7c7c0f26e444b88e801d3656042a169f5
- MD5 SHA1 SHA512
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.