General
- Target 06d45d30ef46764b117b593baedc0f74
- Size 406KB
- Sample211016-2ns34accc9
- SHA256 b5fb89e564bb6fd7432c7bb71adca535e38673b7551ec7a0265ac6ba0de5e613
- MD5 06d45d30ef46764b117b593baedc0f74
- SHA1 02ded5ba3d62e74a5fbb8d6443387cc127290db8
- SHA512 6ad07ec67f490bcc21e0ffa5ca1fc7005cffa1dedc2636e943434db239df9e29a04b463e8f4ec48c38b3b4ae1f2460d2410f2c5b9273d24ca4977a4215663d6b
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
06d45d30ef46764b117b593baedc0f74.exe
Resource
win7-en-20210920
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
UDP
C2
-
45.9.20.182:52236
Targets
-
- Target 06d45d30ef46764b117b593baedc0f74
- Size 406KB
- SHA256 b5fb89e564bb6fd7432c7bb71adca535e38673b7551ec7a0265ac6ba0de5e613
- MD5 06d45d30ef46764b117b593baedc0f74
- SHA1 02ded5ba3d62e74a5fbb8d6443387cc127290db8
- SHA512 6ad07ec67f490bcc21e0ffa5ca1fc7005cffa1dedc2636e943434db239df9e29a04b463e8f4ec48c38b3b4ae1f2460d2410f2c5b9273d24ca4977a4215663d6b
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.