General
- Target 86c3dcdb8ce4a8830e1337d670912bb0.exe
- Size 370KB
- Sample220514-ntz7pshdc8
- SHA256 5654cd870338f75aa96316fee0d1bb06e1fc780c74ea31a4f05ae67de9a108d5
- MD5 86c3dcdb8ce4a8830e1337d670912bb0
- SHA1 49916d2bd0ad7683bb4f212c95f6fa5c735b142a
- SHA512 241730e3784205111ff44376863cbb70a965e97fd43d9fb901e8b37fe1a339e5b31f128c34883712c7b615f0be89a36b96f7f4e2bd84e3756d2f1fa51916b4ea
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
86c3dcdb8ce4a8830e1337d670912bb0.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
51
C2
-
193.106.191.182:23196
Attributes
-
auth_value
21351f5b8358ade7446b0c10ec81735e
Targets
-
- Target 86c3dcdb8ce4a8830e1337d670912bb0.exe
- Size 370KB
- SHA256 5654cd870338f75aa96316fee0d1bb06e1fc780c74ea31a4f05ae67de9a108d5
- MD5 86c3dcdb8ce4a8830e1337d670912bb0
- SHA1 49916d2bd0ad7683bb4f212c95f6fa5c735b142a
- SHA512 241730e3784205111ff44376863cbb70a965e97fd43d9fb901e8b37fe1a339e5b31f128c34883712c7b615f0be89a36b96f7f4e2bd84e3756d2f1fa51916b4ea
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.