General
- Target 757f0a9413bdf1e4b1c9b9abc66eb629
- Size 423KB
- Sample210810-tmcw47cfde
- SHA256 bf96ed8aa602b7611ef90657e75b9612d2a49e57acdfaf4c3f8b40ef562651cc
- MD5 757f0a9413bdf1e4b1c9b9abc66eb629
- SHA1 248f4810bb3d4350b2bb09eced1c557e9fcc8740
- SHA512 187b009618d29c7414e74e84a4fc99ee206004f5d519fa462d159b6c2843a6237ea3ee8168647cddea30a4ce77293cf40d84c9b965c8ebaeec718a101a191e04
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
757f0a9413bdf1e4b1c9b9abc66eb629.exe
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
757f0a9413bdf1e4b1c9b9abc66eb629.exe
Resource
win10v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
SewPalpadin
C2
-
185.215.113.114:8887
Targets
-
- Target 757f0a9413bdf1e4b1c9b9abc66eb629
- Size 423KB
- SHA256 bf96ed8aa602b7611ef90657e75b9612d2a49e57acdfaf4c3f8b40ef562651cc
- MD5 757f0a9413bdf1e4b1c9b9abc66eb629
- SHA1 248f4810bb3d4350b2bb09eced1c557e9fcc8740
- SHA512 187b009618d29c7414e74e84a4fc99ee206004f5d519fa462d159b6c2843a6237ea3ee8168647cddea30a4ce77293cf40d84c9b965c8ebaeec718a101a191e04
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.