General
- Target 8a54239a1198381d7ee58ec079daa9bf.exe
- Size 347KB
- Sample220515-ry481aehg7
- SHA256 23d8c293f8e11955f68c28f40c795e59ab7e7d0c5b5e5c19aed8309c2596e5a9
- MD5 8a54239a1198381d7ee58ec079daa9bf
- SHA1 2186416a26161220603ab0f6f04e7905b9e49af1
- SHA512 f9cbaaba73858b9be37e631ab156cd573e0ea414c121546ca5788d9086af32964a137c4844fd64ace5939b319586e084086b9a361d69cfbe431fd980a15cc493
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
8a54239a1198381d7ee58ec079daa9bf.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
top
C2
-
iclarinyerac.xyz:80
-
manellylarii.xyz:80
Attributes
-
auth_value
b66a08c69f913be894bbfce00805fab1
Targets
-
- Target 8a54239a1198381d7ee58ec079daa9bf.exe
- Size 347KB
- SHA256 23d8c293f8e11955f68c28f40c795e59ab7e7d0c5b5e5c19aed8309c2596e5a9
- MD5 8a54239a1198381d7ee58ec079daa9bf
- SHA1 2186416a26161220603ab0f6f04e7905b9e49af1
- SHA512 f9cbaaba73858b9be37e631ab156cd573e0ea414c121546ca5788d9086af32964a137c4844fd64ace5939b319586e084086b9a361d69cfbe431fd980a15cc493
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.