General
- Target ca05fb7f8b2a66eabcb40a65a8e20573.exe
- Size 414KB
- Sample220417-d8rtrshear
- SHA256 37fb2f142ea2cfca82af4bc9a902d8da24656670cd42d64039b19b58ab3ceae2
- MD5 ca05fb7f8b2a66eabcb40a65a8e20573
- SHA1 3a686d9246bb2e27e2ec2dc68f10178c96498641
- SHA512 44f7ed7001d1dbb1c9209c6e22aa3b3d4ac25c468cdcc5660894c5e0b884eb3384c5dfc857b24e0394b61f9223134b18366557d9a3b6063d3d93b5125c2bca6c
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
ca05fb7f8b2a66eabcb40a65a8e20573.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
EUunik
C2
-
193.106.191.193:23196
Attributes
-
auth_value
183792c2ee5b6e13755417577c702e1e
Targets
-
- Target ca05fb7f8b2a66eabcb40a65a8e20573.exe
- Size 414KB
- SHA256 37fb2f142ea2cfca82af4bc9a902d8da24656670cd42d64039b19b58ab3ceae2
- MD5 ca05fb7f8b2a66eabcb40a65a8e20573
- SHA1 3a686d9246bb2e27e2ec2dc68f10178c96498641
- SHA512 44f7ed7001d1dbb1c9209c6e22aa3b3d4ac25c468cdcc5660894c5e0b884eb3384c5dfc857b24e0394b61f9223134b18366557d9a3b6063d3d93b5125c2bca6c
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.