General
- Target 8136539ac0dae201ae18ae03ce2aa234.exe
- Size 333KB
- Sample220425-wsk1dschd6
- SHA256 fb4985680c725726e991767d1dee970d97ffadf763941ffaf34986185eeb58a4
- MD5 8136539ac0dae201ae18ae03ce2aa234
- SHA1 9f04a3df1e2ff88fc1b95a655a996042ce869811
- SHA512 308d10a1dedf4bba1ebbcb977722c844ed7efdf8a214e1a2a0f5223b6b5231c52eb89f9d4b7f394b2addaefd8cc289a53a2a8fbe4d698c95194803a1cd55cb9c
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
8136539ac0dae201ae18ae03ce2aa234.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
55n
C2
-
193.106.191.78:23196
Attributes
-
auth_value
d4c98a069b6a23ac1d0ed81bca7e2857
Targets
-
- Target 8136539ac0dae201ae18ae03ce2aa234.exe
- Size 333KB
- SHA256 fb4985680c725726e991767d1dee970d97ffadf763941ffaf34986185eeb58a4
- MD5 8136539ac0dae201ae18ae03ce2aa234
- SHA1 9f04a3df1e2ff88fc1b95a655a996042ce869811
- SHA512 308d10a1dedf4bba1ebbcb977722c844ed7efdf8a214e1a2a0f5223b6b5231c52eb89f9d4b7f394b2addaefd8cc289a53a2a8fbe4d698c95194803a1cd55cb9c
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.