General
- Target c19cb6fb47b51fd5d47548dfbe60568f.exe
- Size 425KB
- Sample211114-hm325agab9
- SHA256 cd613a472ee444ebdabe6219452c6a31eff020d162eb079eb52141b018add9df
- MD5 c19cb6fb47b51fd5d47548dfbe60568f
- SHA1 fbc52093c33b489ae43333f1fefdbd79cc643587
- SHA512 6c3abef92471e19bcbe3d2381bdf75c20744a0a42dd8d7725ef485cdcb815a3c7b855c613ce7f39235181963bb1a5e3af264a0ba02947f574832ce64fc89e4cc
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
c19cb6fb47b51fd5d47548dfbe60568f.exe
Resource
win7-en-20211104
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
udptest
C2
-
193.56.146.64:65441
Targets
-
- Target c19cb6fb47b51fd5d47548dfbe60568f.exe
- Size 425KB
- SHA256 cd613a472ee444ebdabe6219452c6a31eff020d162eb079eb52141b018add9df
- MD5 c19cb6fb47b51fd5d47548dfbe60568f
- SHA1 fbc52093c33b489ae43333f1fefdbd79cc643587
- SHA512 6c3abef92471e19bcbe3d2381bdf75c20744a0a42dd8d7725ef485cdcb815a3c7b855c613ce7f39235181963bb1a5e3af264a0ba02947f574832ce64fc89e4cc
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.