General
- Target 1ca5f33ffb87f631cf17e4fcd06eafc1.exe
- Size 361KB
- Sample210925-hmhfesafc2
- SHA256 922295fc8e35b0c40119f965ae4f9f00a4d585ec0fbccd14c34b4c1a3f012cd7
- MD5 1ca5f33ffb87f631cf17e4fcd06eafc1
- SHA1 e6038ac9324ee7aa092ab754c48a5d97983d5319
- SHA512 6a84a2fe9c92c5d15354b5940606ab1086ffaae8c20f4d2492cf76ea2c2e52bb75da4eac2b1f31dcb3304bd9b74e07c4b6fe1af1646efb0a66a483e19d1641ab
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
1ca5f33ffb87f631cf17e4fcd06eafc1.exe
Resource
win7-en-20210920
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
mix25.09
C2
-
185.215.113.15:6043
Targets
-
- Target 1ca5f33ffb87f631cf17e4fcd06eafc1.exe
- Size 361KB
- SHA256 922295fc8e35b0c40119f965ae4f9f00a4d585ec0fbccd14c34b4c1a3f012cd7
- MD5 1ca5f33ffb87f631cf17e4fcd06eafc1
- SHA1 e6038ac9324ee7aa092ab754c48a5d97983d5319
- SHA512 6a84a2fe9c92c5d15354b5940606ab1086ffaae8c20f4d2492cf76ea2c2e52bb75da4eac2b1f31dcb3304bd9b74e07c4b6fe1af1646efb0a66a483e19d1641ab
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.