General
- Target 5a50d1389cf1589d90d36d11c37aa677
- Size 404KB
- Sample220321-ceefxagfh7
- SHA256 a6c58dc411ddd6fae1977d92e601c483931fc6cba08bf003a23cdbeb74244b48
- MD5 5a50d1389cf1589d90d36d11c37aa677
- SHA1 390d43d909860055971ee7bfa619ca149ecfd284
- SHA512 c8ffe7e0581f0fe44a1149bc2cb8277720fbdb480ed2e729209df4da325eae0e0e41b2ac63c9859a2f6154aef91584e27579e081e72bafa1f7b304adc68acf55
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
5a50d1389cf1589d90d36d11c37aa677.exe
Resource
win7-20220311-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
SewPalpadin
C2
-
193.233.48.58:38989
Attributes
-
auth_value
7a741aa449c2131b60755b6dc189af74
Targets
-
- Target 5a50d1389cf1589d90d36d11c37aa677
- Size 404KB
- SHA256 a6c58dc411ddd6fae1977d92e601c483931fc6cba08bf003a23cdbeb74244b48
- MD5 5a50d1389cf1589d90d36d11c37aa677
- SHA1 390d43d909860055971ee7bfa619ca149ecfd284
- SHA512 c8ffe7e0581f0fe44a1149bc2cb8277720fbdb480ed2e729209df4da325eae0e0e41b2ac63c9859a2f6154aef91584e27579e081e72bafa1f7b304adc68acf55
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.