General
- Target c5183b1d6a265a3e64313fc0311ad446.exe
- Size 378KB
- Sample220525-j6pjhsdbek
- SHA256 fffd98df3b081e174357e658e4e01c242c81fa0bb9c8f94b90b2f17f45a27ddc
- MD5 c5183b1d6a265a3e64313fc0311ad446
- SHA1 edc80dc94ddd43749de2439a7dda0cfb297dabbb
- SHA512 4da44b9460063f90c36aa7af9ab2d6a2c1b8e6470cbf78649854a2a92a4da69226c2f5708a6b5efb46e382fe11cbeba5c8e8da94184403d9abecdacdf7be27d9
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
c5183b1d6a265a3e64313fc0311ad446.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
mta
C2
-
193.106.191.222:23196
Attributes
-
auth_value
3d0a7300fdf6b2ac6ae9081b1a400e64
Targets
-
- Target c5183b1d6a265a3e64313fc0311ad446.exe
- Size 378KB
- SHA256 fffd98df3b081e174357e658e4e01c242c81fa0bb9c8f94b90b2f17f45a27ddc
- MD5 c5183b1d6a265a3e64313fc0311ad446
- SHA1 edc80dc94ddd43749de2439a7dda0cfb297dabbb
- SHA512 4da44b9460063f90c36aa7af9ab2d6a2c1b8e6470cbf78649854a2a92a4da69226c2f5708a6b5efb46e382fe11cbeba5c8e8da94184403d9abecdacdf7be27d9
- MD5 SHA1 SHA512
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Accesses cryptocurrency files/wallets, possible credential harvesting
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.