General
- Target bb2b32c65ef894f596de3530f60ae4eb
- Size 346KB
- Sample210824-a5bbmy2zae
- SHA256 d4e1fe0e12967112cb8bb178cebdee1a835d469ba917b8d67c4a81427303acfa
- MD5 bb2b32c65ef894f596de3530f60ae4eb
- SHA1 7f9ded7e51b4ac23b6a84903e19f0c61d6000280
- SHA512 65b78bf6894c31c5885e0e673ec962e7a0d05c6fffaf71933b53430924a7e3b2c3d9721166a149736a3d4a007508a2bdca6128e18eb853b37eaa94bcf07d9f39
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
bb2b32c65ef894f596de3530f60ae4eb.exe
Resource
win7v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
24.08
C2
-
185.215.113.17:48236
Targets
-
- Target bb2b32c65ef894f596de3530f60ae4eb
- Size 346KB
- SHA256 d4e1fe0e12967112cb8bb178cebdee1a835d469ba917b8d67c4a81427303acfa
- MD5 bb2b32c65ef894f596de3530f60ae4eb
- SHA1 7f9ded7e51b4ac23b6a84903e19f0c61d6000280
- SHA512 65b78bf6894c31c5885e0e673ec962e7a0d05c6fffaf71933b53430924a7e3b2c3d9721166a149736a3d4a007508a2bdca6128e18eb853b37eaa94bcf07d9f39
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.