General
- Target 84d4f42700e25257dd5180c30af9daec.exe
- Size 276KB
- Sample210826-wrx5dkc3va
- SHA256 95fdda1da7a2172ac7b2c0e4cf0fa1e40faf2990a46f132597271754a721300c
- MD5 84d4f42700e25257dd5180c30af9daec
- SHA1 a26c5c37dc3d3de761b9a139a79f2d97c76ca5a8
- SHA512 05e068b6c1e2bd309198495b3f68e029f5bd8dc0e6ffd1c8c8bd53374f32d173c23ffd3b52b4bd2c6d81945c8ca9c64018258deb79ace75988b3cbfb4199576c
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
84d4f42700e25257dd5180c30af9daec.exe
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
84d4f42700e25257dd5180c30af9daec.exe
Resource
win10v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
C2
-
185.215.113.29:8678
Targets
-
- Target 84d4f42700e25257dd5180c30af9daec.exe
- Size 276KB
- SHA256 95fdda1da7a2172ac7b2c0e4cf0fa1e40faf2990a46f132597271754a721300c
- MD5 84d4f42700e25257dd5180c30af9daec
- SHA1 a26c5c37dc3d3de761b9a139a79f2d97c76ca5a8
- SHA512 05e068b6c1e2bd309198495b3f68e029f5bd8dc0e6ffd1c8c8bd53374f32d173c23ffd3b52b4bd2c6d81945c8ca9c64018258deb79ace75988b3cbfb4199576c
- MD5 SHA1 SHA512
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.