General
- Target 756d8b14908da76af26b5f9dd72f9a1b.exe
- Size 407KB
- Sample220321-jqedlsabe7
- SHA256 f85ee4b0cdbd3b2011f63e38f0e41c9321a41e1d2efb5c0ce07eb684198f52c6
- MD5 756d8b14908da76af26b5f9dd72f9a1b
- SHA1 d1985d6dcbbdb9e333e07b6e50e5e8ccd238460c
- SHA512 2b25bcd0529f0fd097f339160622451eb0b61d1c5d73f5c6e267432d17a2a6a405600e33238668b837ab847335e4021e1e9cf2e104eda03e80b440c8fb1c25de
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
756d8b14908da76af26b5f9dd72f9a1b.exe
Resource
win7-20220311-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
C2
-
185.215.113.28:4819
Attributes
-
auth_value
e99caef0569c1428b87dce9189c994a4
Targets
-
- Target 756d8b14908da76af26b5f9dd72f9a1b.exe
- Size 407KB
- SHA256 f85ee4b0cdbd3b2011f63e38f0e41c9321a41e1d2efb5c0ce07eb684198f52c6
- MD5 756d8b14908da76af26b5f9dd72f9a1b
- SHA1 d1985d6dcbbdb9e333e07b6e50e5e8ccd238460c
- SHA512 2b25bcd0529f0fd097f339160622451eb0b61d1c5d73f5c6e267432d17a2a6a405600e33238668b837ab847335e4021e1e9cf2e104eda03e80b440c8fb1c25de
- MD5 SHA1 SHA512
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.