General
- Target 33d2aea4016a03b98bbe7859d8cec4fe.exe
- Size 250KB
- Sample210926-ehdpwsecg3
- SHA256 4adeef2878fa958c4663e80779274f3c58d8b8173f8c0e5dca57c69f4f087ebf
- MD5 33d2aea4016a03b98bbe7859d8cec4fe
- SHA1 5c274142d9962c96fec3f5220942205c5f833c89
- SHA512 671f99b067a6eb96ea23a9ef5745b334fd0448f7c8f0b0c70de6aeb07b05ed93f1c34e6dfdd6b0450f03560e63d467b605e9937f52affddad5c1cb867141a045
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
33d2aea4016a03b98bbe7859d8cec4fe.exe
Resource
win7-en-20210920
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
UDP
C2
-
45.9.20.20:13441
Targets
-
- Target 33d2aea4016a03b98bbe7859d8cec4fe.exe
- Size 250KB
- SHA256 4adeef2878fa958c4663e80779274f3c58d8b8173f8c0e5dca57c69f4f087ebf
- MD5 33d2aea4016a03b98bbe7859d8cec4fe
- SHA1 5c274142d9962c96fec3f5220942205c5f833c89
- SHA512 671f99b067a6eb96ea23a9ef5745b334fd0448f7c8f0b0c70de6aeb07b05ed93f1c34e6dfdd6b0450f03560e63d467b605e9937f52affddad5c1cb867141a045
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.