General
- Target bae1142290d2d4ddec9c3a85e0305683.exe
- Size 309KB
- Sample220425-bacabaabe7
- SHA256 70e1b1c0310df1cadb661511529e12423c62dbec5c03e5c4da4f6888a278f0d5
- MD5 bae1142290d2d4ddec9c3a85e0305683
- SHA1 d2ce1c451fc14b0795fb9a321ff0d1eaecae2ff7
- SHA512 425b7110ad7b454b1dd50a128d6e35a7430a50cf4278720cb7ca797b2f92db1b57f0b366093a409a989a22d826fe900c590796912f846089bd2786e1c55be9b3
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
bae1142290d2d4ddec9c3a85e0305683.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
55n
C2
-
193.106.191.78:23196
Attributes
-
auth_value
d4c98a069b6a23ac1d0ed81bca7e2857
Targets
-
- Target bae1142290d2d4ddec9c3a85e0305683.exe
- Size 309KB
- SHA256 70e1b1c0310df1cadb661511529e12423c62dbec5c03e5c4da4f6888a278f0d5
- MD5 bae1142290d2d4ddec9c3a85e0305683
- SHA1 d2ce1c451fc14b0795fb9a321ff0d1eaecae2ff7
- SHA512 425b7110ad7b454b1dd50a128d6e35a7430a50cf4278720cb7ca797b2f92db1b57f0b366093a409a989a22d826fe900c590796912f846089bd2786e1c55be9b3
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.