General
- Target 333c13e421302253a816050078f5de82.exe
- Size 383KB
- Sample220519-hxmg5acbf7
- SHA256 aba4a84e0029518619befed8053f426273fd586b4c1d7e4da40303ea973d5610
- MD5 333c13e421302253a816050078f5de82
- SHA1 3a285657849a5ff523f8dc6cf41d8ddc54f2103c
- SHA512 d5242796e64017921f9b36429a02e370eaf396fc91b658b3cb992fea14d884949b6a652a71dcdcf5afe5ad4d0b6b61042ebdf2766eedb11246f7c4635b40766b
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
333c13e421302253a816050078f5de82.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
meta
C2
-
193.106.191.197:23196
Attributes
-
auth_value
43584b1cb8d44c3baa5916166c3b2b3e
Targets
-
- Target 333c13e421302253a816050078f5de82.exe
- Size 383KB
- SHA256 aba4a84e0029518619befed8053f426273fd586b4c1d7e4da40303ea973d5610
- MD5 333c13e421302253a816050078f5de82
- SHA1 3a285657849a5ff523f8dc6cf41d8ddc54f2103c
- SHA512 d5242796e64017921f9b36429a02e370eaf396fc91b658b3cb992fea14d884949b6a652a71dcdcf5afe5ad4d0b6b61042ebdf2766eedb11246f7c4635b40766b
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.