General
- Target b0e5839f9ef5c172ac7dbb029d12e0c0
- Size 322KB
- Sample220607-kgfezscfc7
- SHA256 fe081cfd90bdfd2afc2564cc944631815679802b3e9a48acf888b508d247d7cb
- MD5 b0e5839f9ef5c172ac7dbb029d12e0c0
- SHA1 df03f872c1ba7b05f9549e161ff13001e402e918
- SHA512 037430e2f6e784b1de8a15a0fcd1d95f13688ff4423938c688dd56f8491d250259430c9b46d153e695e5a416b08b2ebf6ed6c660137acc0fb7b68b781eb62a0d
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
b0e5839f9ef5c172ac7dbb029d12e0c0.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
META
C2
-
193.106.191.245:23196
Attributes
-
auth_value
2ea67e19fe494687c77a179004b4a1c8
Targets
-
- Target b0e5839f9ef5c172ac7dbb029d12e0c0
- Size 322KB
- SHA256 fe081cfd90bdfd2afc2564cc944631815679802b3e9a48acf888b508d247d7cb
- MD5 b0e5839f9ef5c172ac7dbb029d12e0c0
- SHA1 df03f872c1ba7b05f9549e161ff13001e402e918
- SHA512 037430e2f6e784b1de8a15a0fcd1d95f13688ff4423938c688dd56f8491d250259430c9b46d153e695e5a416b08b2ebf6ed6c660137acc0fb7b68b781eb62a0d
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.