General
- Target 086b9ca196e8b8b293af830f7eb44eb7.exe
- Size 419KB
- Sample220202-jxrbrahdhr
- SHA256 3f16c127db5d1896a3dfabdf6dff5a16027165d5a0981e2bd32f9556db9e19ee
- MD5 086b9ca196e8b8b293af830f7eb44eb7
- SHA1 739d3bcb9e3f7fb685c191009ade96475d4778c5
- SHA512 996578e2e1effff7678fac73ff0c636bbb1bff8642b72674a025b3093b7bbea32b9886c4ed44bb8d1e0d2502c27c59d2ebaa2844b4f77bcb4b67176da1079b1f
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
086b9ca196e8b8b293af830f7eb44eb7.exe
Resource
win7-en-20211208
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
086b9ca196e8b8b293af830f7eb44eb7.exe
Resource
win10v2004-en-20220113
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
mix02.02
C2
-
185.215.113.70:21508
Targets
-
- Target 086b9ca196e8b8b293af830f7eb44eb7.exe
- Size 419KB
- SHA256 3f16c127db5d1896a3dfabdf6dff5a16027165d5a0981e2bd32f9556db9e19ee
- MD5 086b9ca196e8b8b293af830f7eb44eb7
- SHA1 739d3bcb9e3f7fb685c191009ade96475d4778c5
- SHA512 996578e2e1effff7678fac73ff0c636bbb1bff8642b72674a025b3093b7bbea32b9886c4ed44bb8d1e0d2502c27c59d2ebaa2844b4f77bcb4b67176da1079b1f
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.