General
- Target 9d114fa7018602284d3fff4ff9d918b5
- Size 393KB
- Sample210901-dfcmqewekj
- SHA256 23560e3e786a9b44cd1d613451898d496cbe13a0bbb80d516a7125871b5aa48e
- MD5 9d114fa7018602284d3fff4ff9d918b5
- SHA1 e3ba7bde804250c6c6c571a720c0b63ae79d90d5
- SHA512 af15571dbe03e8528e482477c15469b173789c90204623a0cfc04799c2816a4b1bcb0f1437a1ec96188c078892896e3570a896cdc5ff0150b71b50b05ccd1688
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
9d114fa7018602284d3fff4ff9d918b5.exe
Resource
win7v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
test
C2
-
193.56.146.78:51487
Targets
-
- Target 9d114fa7018602284d3fff4ff9d918b5
- Size 393KB
- SHA256 23560e3e786a9b44cd1d613451898d496cbe13a0bbb80d516a7125871b5aa48e
- MD5 9d114fa7018602284d3fff4ff9d918b5
- SHA1 e3ba7bde804250c6c6c571a720c0b63ae79d90d5
- SHA512 af15571dbe03e8528e482477c15469b173789c90204623a0cfc04799c2816a4b1bcb0f1437a1ec96188c078892896e3570a896cdc5ff0150b71b50b05ccd1688
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.