General
- Target 73149ae2e584b3d3829ea6cd5709035b.exe
- Size 346KB
- Sample210925-ltdbtsahfm
- SHA256 3ec482600f9fbb506f8a8706dd80d33ef16f0dd7929c7bdfe2b2755ddb059a66
- MD5 73149ae2e584b3d3829ea6cd5709035b
- SHA1 3a66126554e7d7e0661ca0c8358941a6709170e2
- SHA512 91263354412ec073fbba47bf15128cdaacb7465c959346e02e7abc3c88121469ee2a6cc605efacaef987d5f90210a56a74b025e8e02ed4eaaf6273cb6a174117
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
73149ae2e584b3d3829ea6cd5709035b.exe
Resource
win7v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
UTS
C2
-
45.9.20.20:13441
Targets
-
- Target 73149ae2e584b3d3829ea6cd5709035b.exe
- Size 346KB
- SHA256 3ec482600f9fbb506f8a8706dd80d33ef16f0dd7929c7bdfe2b2755ddb059a66
- MD5 73149ae2e584b3d3829ea6cd5709035b
- SHA1 3a66126554e7d7e0661ca0c8358941a6709170e2
- SHA512 91263354412ec073fbba47bf15128cdaacb7465c959346e02e7abc3c88121469ee2a6cc605efacaef987d5f90210a56a74b025e8e02ed4eaaf6273cb6a174117
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.