General
- Target eed720b3e82eed96264b7cf46024010e.exe
- Size 236KB
- Sample210925-py6qqacgd3
- SHA256 d5b86d16c66015ce8a4e662a901b32e566b30ca790feeaf357be69a8df68ba1f
- MD5 eed720b3e82eed96264b7cf46024010e
- SHA1 47af0159f808cf387e62420364a0aed42cbb2d4b
- SHA512 4424de366268a6e7238651d89e5fd7626dde93deb6e6245cb379104adb2f133c58c2b17ab15b8707f24b21e3b3c652ab6b061557975bf1a213fa8e500b111777
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
eed720b3e82eed96264b7cf46024010e.exe
Resource
win7v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
paladin
C2
-
94.26.228.204:32917
Targets
-
- Target eed720b3e82eed96264b7cf46024010e.exe
- Size 236KB
- SHA256 d5b86d16c66015ce8a4e662a901b32e566b30ca790feeaf357be69a8df68ba1f
- MD5 eed720b3e82eed96264b7cf46024010e
- SHA1 47af0159f808cf387e62420364a0aed42cbb2d4b
- SHA512 4424de366268a6e7238651d89e5fd7626dde93deb6e6245cb379104adb2f133c58c2b17ab15b8707f24b21e3b3c652ab6b061557975bf1a213fa8e500b111777
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.