General
- Target fae2de88584cb436988cb180c60af4e0.exe
- Size 361KB
- Sample211109-ga56aabfen
- SHA256 711cf1b385095bccea46165ce96cacdcaf55dfbf10d794813de3e2b83b8a5628
- MD5 fae2de88584cb436988cb180c60af4e0
- SHA1 47fc1da4b94a86562a572456e775850243e7472e
- SHA512 1ee2567b4f60715992a0bdf6c4c3b4ed484cce47b668c0b02cdc6d95daf8ba0eb7d7023a4c3a6bb7194db6a111ded4ff41d4f4b809d8e0e033236fe615daf883
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
fae2de88584cb436988cb180c60af4e0.exe
Resource
win7-en-20211104
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
fae2de88584cb436988cb180c60af4e0.exe
Resource
win10-en-20211014
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
1132044836
C2
-
185.183.32.184:80
Targets
-
- Target fae2de88584cb436988cb180c60af4e0.exe
- Size 361KB
- SHA256 711cf1b385095bccea46165ce96cacdcaf55dfbf10d794813de3e2b83b8a5628
- MD5 fae2de88584cb436988cb180c60af4e0
- SHA1 47fc1da4b94a86562a572456e775850243e7472e
- SHA512 1ee2567b4f60715992a0bdf6c4c3b4ed484cce47b668c0b02cdc6d95daf8ba0eb7d7023a4c3a6bb7194db6a111ded4ff41d4f4b809d8e0e033236fe615daf883
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.