General
- Target 6ce879c81781bfa737f7449308c5f6dd.exe
- Size 370KB
- Sample220514-ey79faeha5
- SHA256 884bec8d35a2a1f84dbb50d62b9a1e0abdd0ef8f3b09521508fae751e04e2db1
- MD5 6ce879c81781bfa737f7449308c5f6dd
- SHA1 188e7745a25f9b642113f36518dbebf70bdedf1f
- SHA512 810d04e3feb174116212b28a29ec24834b0d8b9f6f8f9d4dd57384fb3716e48d28df57acb7e314657cb260164282e69d629c7085efd1abfcc6806db416b2ff18
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
6ce879c81781bfa737f7449308c5f6dd.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
51
C2
-
193.106.191.182:23196
Attributes
-
auth_value
21351f5b8358ade7446b0c10ec81735e
Targets
-
- Target 6ce879c81781bfa737f7449308c5f6dd.exe
- Size 370KB
- SHA256 884bec8d35a2a1f84dbb50d62b9a1e0abdd0ef8f3b09521508fae751e04e2db1
- MD5 6ce879c81781bfa737f7449308c5f6dd
- SHA1 188e7745a25f9b642113f36518dbebf70bdedf1f
- SHA512 810d04e3feb174116212b28a29ec24834b0d8b9f6f8f9d4dd57384fb3716e48d28df57acb7e314657cb260164282e69d629c7085efd1abfcc6806db416b2ff18
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.