General
- Target 5a7aee396101a2bbf4b1bb7005bf336c.exe
- Size 451KB
- Sample211105-lbb12sgchj
- SHA256 aac22d936086de9d86d11cc2c53306a419d7bee549f2923060beb8d4d45dca99
- MD5 5a7aee396101a2bbf4b1bb7005bf336c
- SHA1 fe2824d10ee7dd981b285b9d84885451cb90c724
- SHA512 b6e3eb39a5d06e4409f893fd9b53a19ec87a322941ce2534bc771978b84ef18b5c7d658f5ff86dac1306d7eb926b8b92c12ba46947f290213af1c8e6a3e79991
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
5a7aee396101a2bbf4b1bb7005bf336c.exe
Resource
win7-en-20211014
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
Updbdate
C2
-
193.56.146.64:65441
Targets
-
- Target 5a7aee396101a2bbf4b1bb7005bf336c.exe
- Size 451KB
- SHA256 aac22d936086de9d86d11cc2c53306a419d7bee549f2923060beb8d4d45dca99
- MD5 5a7aee396101a2bbf4b1bb7005bf336c
- SHA1 fe2824d10ee7dd981b285b9d84885451cb90c724
- SHA512 b6e3eb39a5d06e4409f893fd9b53a19ec87a322941ce2534bc771978b84ef18b5c7d658f5ff86dac1306d7eb926b8b92c12ba46947f290213af1c8e6a3e79991
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.