General
- Target 7c91896cc2eb93ff78bafe86968e5279.exe
- Size 370KB
- Sample220514-s2f61schdj
- SHA256 e5abded910d14068bc6098d253f07158f90f08394105feb265392a70b362b714
- MD5 7c91896cc2eb93ff78bafe86968e5279
- SHA1 39f51ea178afcfd5fa5d3f1026810e400433c26e
- SHA512 f82feb0ee7494bc13d17e1ba3d66017d1961a974bb95bf0c5b19f53c4947e1a3d6d3312dabd0d8ed901044c62bda0345eeabd7a9e892ce7615fb645565a39a76
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
7c91896cc2eb93ff78bafe86968e5279.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
51
C2
-
193.106.191.182:23196
Attributes
-
auth_value
21351f5b8358ade7446b0c10ec81735e
Targets
-
- Target 7c91896cc2eb93ff78bafe86968e5279.exe
- Size 370KB
- SHA256 e5abded910d14068bc6098d253f07158f90f08394105feb265392a70b362b714
- MD5 7c91896cc2eb93ff78bafe86968e5279
- SHA1 39f51ea178afcfd5fa5d3f1026810e400433c26e
- SHA512 f82feb0ee7494bc13d17e1ba3d66017d1961a974bb95bf0c5b19f53c4947e1a3d6d3312dabd0d8ed901044c62bda0345eeabd7a9e892ce7615fb645565a39a76
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.