General
- Target 5007544c0757ac19cefd29d0d916e8f9.exe
- Size 367KB
- Sample220514-zve4pseafn
- SHA256 e0f3a387b95a42ad14cdf057043405a8fb3e4645a1fb3e6dd6211bdb0c53ff8a
- MD5 5007544c0757ac19cefd29d0d916e8f9
- SHA1 948420edeccb20d269a56fa24003c8c59db61e0a
- SHA512 6c1954564f7da4962c1cc3827eeaa8f700b7c7573060420b47ebee866d9b70e08dd857b2d1e2776bc54b3fa64458c78e3836911464b56393b5db9bca79b57d83
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
5007544c0757ac19cefd29d0d916e8f9.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
51
C2
-
193.106.191.182:23196
Attributes
-
auth_value
21351f5b8358ade7446b0c10ec81735e
Targets
-
- Target 5007544c0757ac19cefd29d0d916e8f9.exe
- Size 367KB
- SHA256 e0f3a387b95a42ad14cdf057043405a8fb3e4645a1fb3e6dd6211bdb0c53ff8a
- MD5 5007544c0757ac19cefd29d0d916e8f9
- SHA1 948420edeccb20d269a56fa24003c8c59db61e0a
- SHA512 6c1954564f7da4962c1cc3827eeaa8f700b7c7573060420b47ebee866d9b70e08dd857b2d1e2776bc54b3fa64458c78e3836911464b56393b5db9bca79b57d83
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.