General
- Target f2262280c86ebc1bcd5b22bcac0e536b.exe
- Size 431KB
- Sample211215-ct5xeagfd4
- SHA256 90776857353032304ca4b8e052388a4ece78a08852d051908dc7a18d4aed157f
- MD5 f2262280c86ebc1bcd5b22bcac0e536b
- SHA1 7869d9a6be56d74b9df7819a74f3141fc5cd3d98
- SHA512 607be46948256a4a3dcb134e1100084276b231cd697ca0e4bd1005d91120f42328418136b0188d286fb80230acb80ec6216acc43821afd14b716cefe6d92e1a2
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
f2262280c86ebc1bcd5b22bcac0e536b.exe
Resource
win7-en-20211208
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
11
C2
-
45.9.20.157:46257
Targets
-
- Target f2262280c86ebc1bcd5b22bcac0e536b.exe
- Size 431KB
- SHA256 90776857353032304ca4b8e052388a4ece78a08852d051908dc7a18d4aed157f
- MD5 f2262280c86ebc1bcd5b22bcac0e536b
- SHA1 7869d9a6be56d74b9df7819a74f3141fc5cd3d98
- SHA512 607be46948256a4a3dcb134e1100084276b231cd697ca0e4bd1005d91120f42328418136b0188d286fb80230acb80ec6216acc43821afd14b716cefe6d92e1a2
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.