General
- Target d7b64bfbaaddbd173a083f6c96d435fc
- Size 390KB
- Sample220616-dtldfacdc8
- SHA256 4a0b2b7745ce98e33f250ec2563916f007721933ec42e878b7c598b147ad2ea1
- MD5 d7b64bfbaaddbd173a083f6c96d435fc
- SHA1 b625eb1d63018d93451816f61ffaf1faed6fe07b
- SHA512 0f775c905b32beb5f710d5366f2d9499a7695f8aa1844430975ec0d6b00480b5a3f8e316b2528ef13acaa1c34ab589ccea206fbdbeb6682115b2828df717d759
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
d7b64bfbaaddbd173a083f6c96d435fc.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
META
C2
-
193.106.191.245:23196
Attributes
-
auth_value
2ea67e19fe494687c77a179004b4a1c8
Targets
-
- Target d7b64bfbaaddbd173a083f6c96d435fc
- Size 390KB
- SHA256 4a0b2b7745ce98e33f250ec2563916f007721933ec42e878b7c598b147ad2ea1
- MD5 d7b64bfbaaddbd173a083f6c96d435fc
- SHA1 b625eb1d63018d93451816f61ffaf1faed6fe07b
- SHA512 0f775c905b32beb5f710d5366f2d9499a7695f8aa1844430975ec0d6b00480b5a3f8e316b2528ef13acaa1c34ab589ccea206fbdbeb6682115b2828df717d759
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.