General
- Target 73683dfe3572e4c81c03d74ae4c09b72.exe
- Size 416KB
- Sample220311-h7tn7aged2
- SHA256 9b5f11cb636c00558e47f9c3d5a706c340b7b8ac34edf80cb71cf7ec70091dca
- MD5 73683dfe3572e4c81c03d74ae4c09b72
- SHA1 0f4ba87e6581c83dd73b0018d9831ef168cc9942
- SHA512 da00c711357f94ea7199f071fccdbc00bc485ca3c96c432f8756bae7d9f8784d9ac2a7737e3be59ab6f2e9ac8d4f96c069af53b2d07a68dd4d50e0406da96fdb
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
73683dfe3572e4c81c03d74ae4c09b72.exe
Resource
win7-20220310-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
ww
C2
-
193.106.191.67:44400
Attributes
-
auth_value
5a1b28ccd05953f5c3f99729c12427cc
Targets
-
- Target 73683dfe3572e4c81c03d74ae4c09b72.exe
- Size 416KB
- SHA256 9b5f11cb636c00558e47f9c3d5a706c340b7b8ac34edf80cb71cf7ec70091dca
- MD5 73683dfe3572e4c81c03d74ae4c09b72
- SHA1 0f4ba87e6581c83dd73b0018d9831ef168cc9942
- SHA512 da00c711357f94ea7199f071fccdbc00bc485ca3c96c432f8756bae7d9f8784d9ac2a7737e3be59ab6f2e9ac8d4f96c069af53b2d07a68dd4d50e0406da96fdb
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.