General
- Target 6c87df463c7e57eca5835bfc882bb318.exe
- Size 296KB
- Sample211008-sx4fraefd8
- SHA256 902919bbb5fcfe040dfa4504239b4638bc78e1fa5e296de5fe92d0b578902355
- MD5 6c87df463c7e57eca5835bfc882bb318
- SHA1 7b1c62241e15839c125ec4328673d00c5285b8ee
- SHA512 4aeac36b41a7b182bee990ae9124c31a30c6d1beb1bc4f8a88c0b4ab1fcfd3957c413c44975e8b8676d3448d213f84ee3a5df24c9e069bee5769629cb53867ba
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
6c87df463c7e57eca5835bfc882bb318.exe
Resource
win7v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
new
C2
-
45.9.20.107:46187
Targets
-
- Target 6c87df463c7e57eca5835bfc882bb318.exe
- Size 296KB
- SHA256 902919bbb5fcfe040dfa4504239b4638bc78e1fa5e296de5fe92d0b578902355
- MD5 6c87df463c7e57eca5835bfc882bb318
- SHA1 7b1c62241e15839c125ec4328673d00c5285b8ee
- SHA512 4aeac36b41a7b182bee990ae9124c31a30c6d1beb1bc4f8a88c0b4ab1fcfd3957c413c44975e8b8676d3448d213f84ee3a5df24c9e069bee5769629cb53867ba
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.