General
- Target aededd80c17865052eeb53e9cdc597ba.exe
- Size 407KB
- Sample220607-lnrx2ahbhk
- SHA256 2da822010184f90da1d84769e99ca9347d25dbfad32a2d558a596c7e30315c3c
- MD5 aededd80c17865052eeb53e9cdc597ba
- SHA1 1852dd84738359252e794655f4f92ddb4b841a84
- SHA512 5a768cf44954f8be2fcf6c03a03979ef0f1cd34dd4eb88f9087cbd691eebfcc8a40ce25fab434b9ee21936ed9d422f7fa46ecc8788f684138c73994cc10d37a7
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
aededd80c17865052eeb53e9cdc597ba.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
x777x
C2
-
doaisunto.xyz:26414
-
olmilllchi.xyz:26414
Attributes
-
auth_value
2a40d458e12bd4704679a0bd46b37ddd
Targets
-
- Target aededd80c17865052eeb53e9cdc597ba.exe
- Size 407KB
- SHA256 2da822010184f90da1d84769e99ca9347d25dbfad32a2d558a596c7e30315c3c
- MD5 aededd80c17865052eeb53e9cdc597ba
- SHA1 1852dd84738359252e794655f4f92ddb4b841a84
- SHA512 5a768cf44954f8be2fcf6c03a03979ef0f1cd34dd4eb88f9087cbd691eebfcc8a40ce25fab434b9ee21936ed9d422f7fa46ecc8788f684138c73994cc10d37a7
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.