General
- Target 84d729286d1b4aa46e7a9a98d3fead68
- Size 386KB
- Sample210911-qf33jsbdd2
- SHA256 3929767d901ede913a57de5ea4ebdcff06b840f762d8f33e0b1d5eec8b570cb0
- MD5 84d729286d1b4aa46e7a9a98d3fead68
- SHA1 4934716c1a2e33dada7a549dada8877b408ecba9
- SHA512 f0daf47e6bfe38e95ca42c5acc6c39f1a1dbfdaf3080adb7071ee2e40bbd7c466726648874c1c19cf8b72d3e3dbeab463d02dc5b22d087617944223365fed517
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
84d729286d1b4aa46e7a9a98d3fead68.exe
Resource
win7v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
UDP
C2
-
45.9.20.20:13441
Targets
-
- Target 84d729286d1b4aa46e7a9a98d3fead68
- Size 386KB
- SHA256 3929767d901ede913a57de5ea4ebdcff06b840f762d8f33e0b1d5eec8b570cb0
- MD5 84d729286d1b4aa46e7a9a98d3fead68
- SHA1 4934716c1a2e33dada7a549dada8877b408ecba9
- SHA512 f0daf47e6bfe38e95ca42c5acc6c39f1a1dbfdaf3080adb7071ee2e40bbd7c466726648874c1c19cf8b72d3e3dbeab463d02dc5b22d087617944223365fed517
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.