General
- Target c7dd7c1133fa427cef581f7976988d52.exe
- Size 334KB
- Sample220606-rcpanadagk
- SHA256 dda213bc80c8c82fc91d412150ee4a02cc9639eacc9f9ca008a9b4edb4fdc0c8
- MD5 c7dd7c1133fa427cef581f7976988d52
- SHA1 75dbc7215cf33d5c1f25d30698a502d0a4868002
- SHA512 2b76ee2ab0e508df9039d7278ef7d5ed024fec88393b1d8824a979d74cd4e0c06d78756d997afbcffa37f4beb7eab0883a52e20321bccbbade608e80bca23755
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
c7dd7c1133fa427cef581f7976988d52.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
x1010x
C2
-
doaisunto.xyz:26414
-
olmilllchi.xyz:26414
Attributes
-
auth_value
ad926fa7ebe66d8abd73e52a905302ca
Targets
-
- Target c7dd7c1133fa427cef581f7976988d52.exe
- Size 334KB
- SHA256 dda213bc80c8c82fc91d412150ee4a02cc9639eacc9f9ca008a9b4edb4fdc0c8
- MD5 c7dd7c1133fa427cef581f7976988d52
- SHA1 75dbc7215cf33d5c1f25d30698a502d0a4868002
- SHA512 2b76ee2ab0e508df9039d7278ef7d5ed024fec88393b1d8824a979d74cd4e0c06d78756d997afbcffa37f4beb7eab0883a52e20321bccbbade608e80bca23755
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.