General
- Target 03d705ca7df7ef861a5484deab4fbe11
- Size 412KB
- Sample220623-jvdymsfab9
- SHA256 8fac87c7fc3115c35d349cbb182bc1626d08ce8f837f311d101fd51d6196465b
- MD5 03d705ca7df7ef861a5484deab4fbe11
- SHA1 abd4ddbe04ddf8bab15133d6898108ccaace41bf
- SHA512 6c699bb7d95ae2ebe4fc22fa7bf3ef3578546e8bb02a64c78166e3ec8b19d56cb4886c1ca2017fbb7b43b50bd804906d7ac2fb59186b7238a4cc172fcdd0bc16
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
03d705ca7df7ef861a5484deab4fbe11.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
RUZKI
C2
-
193.106.191.246:23196
Attributes
-
auth_value
121027c094f768a0a0e9b562f6417952
Targets
-
- Target 03d705ca7df7ef861a5484deab4fbe11
- Size 412KB
- SHA256 8fac87c7fc3115c35d349cbb182bc1626d08ce8f837f311d101fd51d6196465b
- MD5 03d705ca7df7ef861a5484deab4fbe11
- SHA1 abd4ddbe04ddf8bab15133d6898108ccaace41bf
- SHA512 6c699bb7d95ae2ebe4fc22fa7bf3ef3578546e8bb02a64c78166e3ec8b19d56cb4886c1ca2017fbb7b43b50bd804906d7ac2fb59186b7238a4cc172fcdd0bc16
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.