General
- Target 0918580c2b042d3349d6cf2c53f88b0b
- Size 390KB
- Sample220616-jn9fzaccd2
- SHA256 dc598f9de8139e8eb4d6db7f9e49b847f17b2dc1d8674a3b4eb047b0ceb4f011
- MD5 0918580c2b042d3349d6cf2c53f88b0b
- SHA1 272ed8c0352dfcc1255cc4a87c96cef8c3164d4d
- SHA512 2b435a24333049af2e328108fde7bfe18b01920a2daae71f4ba53bf5efa21583c9eaf1428dcc0276c7d8a422479c43c85a8330459194ee3e03f3e89d62e2d3cd
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
0918580c2b042d3349d6cf2c53f88b0b.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
META
C2
-
193.106.191.245:23196
Attributes
-
auth_value
2ea67e19fe494687c77a179004b4a1c8
Targets
-
- Target 0918580c2b042d3349d6cf2c53f88b0b
- Size 390KB
- SHA256 dc598f9de8139e8eb4d6db7f9e49b847f17b2dc1d8674a3b4eb047b0ceb4f011
- MD5 0918580c2b042d3349d6cf2c53f88b0b
- SHA1 272ed8c0352dfcc1255cc4a87c96cef8c3164d4d
- SHA512 2b435a24333049af2e328108fde7bfe18b01920a2daae71f4ba53bf5efa21583c9eaf1428dcc0276c7d8a422479c43c85a8330459194ee3e03f3e89d62e2d3cd
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.