General
- Target 9052d222279a69a9fc88db6ef69ed778.exe
- Size 334KB
- Sample220425-s2fv9aggck
- SHA256 84738d36c89cf1dfd33a53f1562135eb2ba5ac580e609cd67e7ee3259a58691a
- MD5 9052d222279a69a9fc88db6ef69ed778
- SHA1 538cf5333b8e808543fe12f6e820e6686bf97b88
- SHA512 fd8a97fd3cc4d1c847c6c5805bf192fbba02969f1e7c3de44ca9b3a1194fc80b2b4c98d57a3066bf76bb40e950b1d1e6aa9ba64f7de4c0c439acc2a1ecfdaac0
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
9052d222279a69a9fc88db6ef69ed778.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
55n
C2
-
193.106.191.78:23196
Attributes
-
auth_value
d4c98a069b6a23ac1d0ed81bca7e2857
Targets
-
- Target 9052d222279a69a9fc88db6ef69ed778.exe
- Size 334KB
- SHA256 84738d36c89cf1dfd33a53f1562135eb2ba5ac580e609cd67e7ee3259a58691a
- MD5 9052d222279a69a9fc88db6ef69ed778
- SHA1 538cf5333b8e808543fe12f6e820e6686bf97b88
- SHA512 fd8a97fd3cc4d1c847c6c5805bf192fbba02969f1e7c3de44ca9b3a1194fc80b2b4c98d57a3066bf76bb40e950b1d1e6aa9ba64f7de4c0c439acc2a1ecfdaac0
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.