General
- Target 69a1d114e5a10c4dca5e18d62deb95c1.exe
- Size 305KB
- Sample210925-mfes6sbbc5
- SHA256 7f272dc930b81820579f57be5c3cf8f1a87fe6fe2fbd3e631b27957eae6f6f86
- MD5 69a1d114e5a10c4dca5e18d62deb95c1
- SHA1 d25aaa843a63307d902ab49e86598e4ab4d4a508
- SHA512 27fbfaad600772dccc04ae5ec0d2e152edd66eec77865f1d9069a5d6c0c7e29b10181231c21e2c120430b490923d05bc1bcdce3668e51cb75e3cfc114eb5209e
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
69a1d114e5a10c4dca5e18d62deb95c1.exe
Resource
win7v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
UTS
C2
-
45.9.20.20:13441
Targets
-
- Target 69a1d114e5a10c4dca5e18d62deb95c1.exe
- Size 305KB
- SHA256 7f272dc930b81820579f57be5c3cf8f1a87fe6fe2fbd3e631b27957eae6f6f86
- MD5 69a1d114e5a10c4dca5e18d62deb95c1
- SHA1 d25aaa843a63307d902ab49e86598e4ab4d4a508
- SHA512 27fbfaad600772dccc04ae5ec0d2e152edd66eec77865f1d9069a5d6c0c7e29b10181231c21e2c120430b490923d05bc1bcdce3668e51cb75e3cfc114eb5209e
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.