General
- Target 40073a62aad20fcaf8226d3ed7b7dd98.exe
- Size 367KB
- Sample220412-s5b2gadbel
- SHA256 bf443e407476f3c013f106bb2ffc7540dac5dc5badd162b9574f13fa500604ce
- MD5 40073a62aad20fcaf8226d3ed7b7dd98
- SHA1 c50ea827a4e6695594580a562cfd8fd31630de90
- SHA512 6f98ea608485b6cde18b1b16d0ef7820f0f5d27d70e5b68ba170675a5f5f6c8e10098caf1799c8e3d54be01e02c8536981c322025b79118d6b0b7fee9935adb7
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
40073a62aad20fcaf8226d3ed7b7dd98.exe
Resource
win7-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
40073a62aad20fcaf8226d3ed7b7dd98.exe
Resource
win10v2004-20220331-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
50
C2
-
193.106.191.153:23196
Attributes
-
auth_value
8735fcb130c82dd9d353478678d60bde
Targets
-
- Target 40073a62aad20fcaf8226d3ed7b7dd98.exe
- Size 367KB
- SHA256 bf443e407476f3c013f106bb2ffc7540dac5dc5badd162b9574f13fa500604ce
- MD5 40073a62aad20fcaf8226d3ed7b7dd98
- SHA1 c50ea827a4e6695594580a562cfd8fd31630de90
- SHA512 6f98ea608485b6cde18b1b16d0ef7820f0f5d27d70e5b68ba170675a5f5f6c8e10098caf1799c8e3d54be01e02c8536981c322025b79118d6b0b7fee9935adb7
- MD5 SHA1 SHA512
-
Meta Stealer Stealer
Meta Stealer steals passwords stored in browsers, written in C++.
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.