General
- Target ab828fda3547e23c2c29049d2f0ee7b4
- Size 403KB
- Sample220422-sae5mshfaq
- SHA256 cd4e23ff3b0f258addb9aa2a2e369b85ec7ea398c5e3a590136a8576e2676c1a
- MD5 ab828fda3547e23c2c29049d2f0ee7b4
- SHA1 45b5e7b6812e52d8849d3cb4f3968000bd2bd994
- SHA512 423022161ead8382f77eaa419ddc44201999dd5dfe766fc4846f669356efd9e7642a4e59d97f0200d3217dd9a811205af9f3d713d0884081d537f9bc618ceefb
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
ab828fda3547e23c2c29049d2f0ee7b4.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
test
C2
-
185.215.113.115:39325
Attributes
-
auth_value
a31b0c1c766c1173a5e8fd78f7ba8b51
Targets
-
- Target ab828fda3547e23c2c29049d2f0ee7b4
- Size 403KB
- SHA256 cd4e23ff3b0f258addb9aa2a2e369b85ec7ea398c5e3a590136a8576e2676c1a
- MD5 ab828fda3547e23c2c29049d2f0ee7b4
- SHA1 45b5e7b6812e52d8849d3cb4f3968000bd2bd994
- SHA512 423022161ead8382f77eaa419ddc44201999dd5dfe766fc4846f669356efd9e7642a4e59d97f0200d3217dd9a811205af9f3d713d0884081d537f9bc618ceefb
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.