General
- Target 01daf72691dfa5c526c1c6782ac736f8.exe
- Size 378KB
- Sample220525-k3a3dshee5
- SHA256 e8bc1142bebbd4cdd5b18e4db7ea39ac690988d1690632ddc4fc4618d6e6e614
- MD5 01daf72691dfa5c526c1c6782ac736f8
- SHA1 1f01de9b008ead35a251886e096553ef9fb050df
- SHA512 adc9c36a4f303caf21836fedcdb2491cff02d57ea2e2ae2a627075db55efecfade6394051c985f33acd8a93594c071dd52c421f285c37ecc56ac63e2a5a29187
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
01daf72691dfa5c526c1c6782ac736f8.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
mta
C2
-
193.106.191.222:23196
Attributes
-
auth_value
3d0a7300fdf6b2ac6ae9081b1a400e64
Targets
-
- Target 01daf72691dfa5c526c1c6782ac736f8.exe
- Size 378KB
- SHA256 e8bc1142bebbd4cdd5b18e4db7ea39ac690988d1690632ddc4fc4618d6e6e614
- MD5 01daf72691dfa5c526c1c6782ac736f8
- SHA1 1f01de9b008ead35a251886e096553ef9fb050df
- SHA512 adc9c36a4f303caf21836fedcdb2491cff02d57ea2e2ae2a627075db55efecfade6394051c985f33acd8a93594c071dd52c421f285c37ecc56ac63e2a5a29187
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.