General
- Target c844c77a4052cd87225ef065c71abb1d
- Size 269KB
- Sample210828-ktwb8wt38s
- SHA256 d319ddd3d52abce88199f3b7d1385bb3258290139b8b05a1ef2b672af8da2fba
- MD5 c844c77a4052cd87225ef065c71abb1d
- SHA1 a2fa85d3b42005660c622aa1e59708d38a8b57b0
- SHA512 0e923e260e29672e9d33e924cfb775fb4eca26ebc66bee09d0b7f28983f06aa47e9f0d6c331517a6ab09d8ddf583fa0aafeb89d150d982bd20ad41a1338d3cbb
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
c844c77a4052cd87225ef065c71abb1d.exe
Resource
win7v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
hello
C2
-
80.66.87.33:36976
Targets
-
- Target c844c77a4052cd87225ef065c71abb1d
- Size 269KB
- SHA256 d319ddd3d52abce88199f3b7d1385bb3258290139b8b05a1ef2b672af8da2fba
- MD5 c844c77a4052cd87225ef065c71abb1d
- SHA1 a2fa85d3b42005660c622aa1e59708d38a8b57b0
- SHA512 0e923e260e29672e9d33e924cfb775fb4eca26ebc66bee09d0b7f28983f06aa47e9f0d6c331517a6ab09d8ddf583fa0aafeb89d150d982bd20ad41a1338d3cbb
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.