General
- Target 6a59144d4ce51d4ae147c3da00914071.exe
- Size 358KB
- Sample210925-lfxtbaahbq
- SHA256 1bb780874cc2487b51219376e2ac09e2596fde50c61ba0904d58a9594de64bee
- MD5 6a59144d4ce51d4ae147c3da00914071
- SHA1 7df7e0d23bfedb44e49eb496e5ac14c1308f58ed
- SHA512 03c37c5c19a2690f0fe12b8c452143cd30ed9c542a2d493455ce28849c740a5aeb520526daa93496c8294c4eab94a654d6fbed6fb44faae57efebccfb5e34d7d
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
6a59144d4ce51d4ae147c3da00914071.exe
Resource
win7-en-20210920
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
mix23.09
C2
-
185.215.113.15:6043
Targets
-
- Target 6a59144d4ce51d4ae147c3da00914071.exe
- Size 358KB
- SHA256 1bb780874cc2487b51219376e2ac09e2596fde50c61ba0904d58a9594de64bee
- MD5 6a59144d4ce51d4ae147c3da00914071
- SHA1 7df7e0d23bfedb44e49eb496e5ac14c1308f58ed
- SHA512 03c37c5c19a2690f0fe12b8c452143cd30ed9c542a2d493455ce28849c740a5aeb520526daa93496c8294c4eab94a654d6fbed6fb44faae57efebccfb5e34d7d
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.