General
- Target 04e626c2422ae067b4daebe160ee93ee.exe
- Size 382KB
- Sample220418-m4j3sscecj
- SHA256 27258ad331c10ea06d27142ed71cb818e37fe30da95f2c93edebb051ec474439
- MD5 04e626c2422ae067b4daebe160ee93ee
- SHA1 61b02d2f6d66960cd3da66c42802b49968ccfa7a
- SHA512 9f0348a0a57028c6eb13dc5d7f96034249b9c8c470f1e5045d657a78ed43f9fa9083a55cc6e955dd2cbfae647e4fa9265fe6c45a6e6b93a0a10e4b606d413b19
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
04e626c2422ae067b4daebe160ee93ee.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
55
C2
-
193.106.191.204:23196
Attributes
-
auth_value
4f084904929f42bfaee560d1d84cb568
Targets
-
- Target 04e626c2422ae067b4daebe160ee93ee.exe
- Size 382KB
- SHA256 27258ad331c10ea06d27142ed71cb818e37fe30da95f2c93edebb051ec474439
- MD5 04e626c2422ae067b4daebe160ee93ee
- SHA1 61b02d2f6d66960cd3da66c42802b49968ccfa7a
- SHA512 9f0348a0a57028c6eb13dc5d7f96034249b9c8c470f1e5045d657a78ed43f9fa9083a55cc6e955dd2cbfae647e4fa9265fe6c45a6e6b93a0a10e4b606d413b19
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.