General
- Target c7cac8cc0e2077e005deba365bcea66b.exe
- Size 407KB
- Sample220311-vqvldaadf7
- SHA256 010bccbca75ce01cac8cdaf4958852f672cd07a5b7f919ed20fcbccab8d1d586
- MD5 c7cac8cc0e2077e005deba365bcea66b
- SHA1 808fd6a380bb476df362ab6f44b75530c2796c32
- SHA512 ca3267ed7549de940465ce8cf887f3cc8b862b7ab2b13116ada18316e78e4428616191c7e13e37736665ba0da6264230ed822cb754fb7774146c606b81d650ba
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
c7cac8cc0e2077e005deba365bcea66b.exe
Resource
win7-20220311-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
ww
C2
-
193.106.191.67:44400
Attributes
-
auth_value
5a1b28ccd05953f5c3f99729c12427cc
Targets
-
- Target c7cac8cc0e2077e005deba365bcea66b.exe
- Size 407KB
- SHA256 010bccbca75ce01cac8cdaf4958852f672cd07a5b7f919ed20fcbccab8d1d586
- MD5 c7cac8cc0e2077e005deba365bcea66b
- SHA1 808fd6a380bb476df362ab6f44b75530c2796c32
- SHA512 ca3267ed7549de940465ce8cf887f3cc8b862b7ab2b13116ada18316e78e4428616191c7e13e37736665ba0da6264230ed822cb754fb7774146c606b81d650ba
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.