General
- Target 46e6dd5eba1795c54fad7d9e5a4e034b.exe
- Size 332KB
- Sample211003-bgna6afaar
- SHA256 4a413f1ffc68426b52cca4011600c29d2ef3def3deaa90fc3646357bb9d8889a
- MD5 46e6dd5eba1795c54fad7d9e5a4e034b
- SHA1 94bf623a7b86ca53947eb04f3b8066f260ce0fce
- SHA512 0ce3d5698af90e57c2338b0890ce995b04b243a7a402a4be5496845261d988a3a2ad950fdf244d0a0ea817f1f82bb9dc52f5e91d75b607c512aa971a152dd26e
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
46e6dd5eba1795c54fad7d9e5a4e034b.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
46e6dd5eba1795c54fad7d9e5a4e034b.exe
Resource
win10-en-20210920
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
C2
-
108.62.12.248:40746
Targets
-
- Target 46e6dd5eba1795c54fad7d9e5a4e034b.exe
- Size 332KB
- SHA256 4a413f1ffc68426b52cca4011600c29d2ef3def3deaa90fc3646357bb9d8889a
- MD5 46e6dd5eba1795c54fad7d9e5a4e034b
- SHA1 94bf623a7b86ca53947eb04f3b8066f260ce0fce
- SHA512 0ce3d5698af90e57c2338b0890ce995b04b243a7a402a4be5496845261d988a3a2ad950fdf244d0a0ea817f1f82bb9dc52f5e91d75b607c512aa971a152dd26e
- MD5 SHA1 SHA512
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.