General
- Target 7ce7a93a0ccddeae523707bef245d4a9.exe
- Size 322KB
- Sample210903-xytp6addf8
- SHA256 e463abd6719107c76861a49c45e46f7183f0038264f2e31f328bf4eb3554c8a5
- MD5 7ce7a93a0ccddeae523707bef245d4a9
- SHA1 eb37c01d39617e4a0714e32d6ac965ce80038d20
- SHA512 a3e1eb07af5b5261d6c09ae5064ba506604aa2fb0a746d0890d63044c9fbf401e5f318a01a4b16eab66c977e2b693e50c95473ad301d224d267e50e89cc87b8a
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
7ce7a93a0ccddeae523707bef245d4a9.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
7ce7a93a0ccddeae523707bef245d4a9.exe
Resource
win10-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
C2
-
185.215.113.29:8678
Targets
-
- Target 7ce7a93a0ccddeae523707bef245d4a9.exe
- Size 322KB
- SHA256 e463abd6719107c76861a49c45e46f7183f0038264f2e31f328bf4eb3554c8a5
- MD5 7ce7a93a0ccddeae523707bef245d4a9
- SHA1 eb37c01d39617e4a0714e32d6ac965ce80038d20
- SHA512 a3e1eb07af5b5261d6c09ae5064ba506604aa2fb0a746d0890d63044c9fbf401e5f318a01a4b16eab66c977e2b693e50c95473ad301d224d267e50e89cc87b8a
- MD5 SHA1 SHA512
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.