General
- Target 0cf59a811521e09539cb4195a4cb77b9
- Size 386KB
- Sample210911-qsdcnaeedj
- SHA256 cf871e535adfa63b63b8eedce80f87996cffbd415826a6559c6fcf0585f2c885
- MD5 0cf59a811521e09539cb4195a4cb77b9
- SHA1 88bf56e6b102ac53e56a234ad88f4d9269d3ac33
- SHA512 b6faacc4e1a99aacd5bdf8b85c5f4d6e401e19b25ccd9b6c00f8913b16a2bddd514529caa19838d975058955c14c9b0b6dba013602d11e22855de2af78ff6328
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
0cf59a811521e09539cb4195a4cb77b9.exe
Resource
win7-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
UDP
C2
-
45.9.20.20:13441
Targets
-
- Target 0cf59a811521e09539cb4195a4cb77b9
- Size 386KB
- SHA256 cf871e535adfa63b63b8eedce80f87996cffbd415826a6559c6fcf0585f2c885
- MD5 0cf59a811521e09539cb4195a4cb77b9
- SHA1 88bf56e6b102ac53e56a234ad88f4d9269d3ac33
- SHA512 b6faacc4e1a99aacd5bdf8b85c5f4d6e401e19b25ccd9b6c00f8913b16a2bddd514529caa19838d975058955c14c9b0b6dba013602d11e22855de2af78ff6328
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.