General
- Target 88b7faf82455e5327c3102779677b5de.exe
- Size 346KB
- Sample210920-wlcensega5
- SHA256 1d91ab82e01d7682deecbeef7b441f26e405c0053e0354e92fdb5cfe61b097b0
- MD5 88b7faf82455e5327c3102779677b5de
- SHA1 0893f2bea5dc53659f96122798c632b67d45804c
- SHA512 563b1304f6b770c70b14beb90c1866083d3c3472cf3ef7722973d0f133ea87d8b11fd8903c72590612ee35725520c58223343695101b00a8cd0b02de63ba0963
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
88b7faf82455e5327c3102779677b5de.exe
Resource
win7-en-20210920
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
paladin
C2
-
188.124.36.242:25802
Targets
-
- Target 88b7faf82455e5327c3102779677b5de.exe
- Size 346KB
- SHA256 1d91ab82e01d7682deecbeef7b441f26e405c0053e0354e92fdb5cfe61b097b0
- MD5 88b7faf82455e5327c3102779677b5de
- SHA1 0893f2bea5dc53659f96122798c632b67d45804c
- SHA512 563b1304f6b770c70b14beb90c1866083d3c3472cf3ef7722973d0f133ea87d8b11fd8903c72590612ee35725520c58223343695101b00a8cd0b02de63ba0963
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.