General
- Target dba6c48fecbda6b2c82d0cff77f26713
- Size 398KB
- Sample220704-xdhr6aafhr
- SHA256 6c3c4bd6eaf42f187fd210cce41bbaf0343ce67f9029403e7626f50ec6aab2a4
- MD5 dba6c48fecbda6b2c82d0cff77f26713
- SHA1 ccb8f4a003be6dbc56bf778a7b094c322f62f0f0
- SHA512 2dd6f48eeaea642d8ada0ba5ea6c44b01ad10963d34599d2ee0ec9ac08946075e4e37f060e780e015a869be55da01d2f59993d07422442852e65a4da54a36d93
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
dba6c48fecbda6b2c82d0cff77f26713.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
C2
-
193.124.22.7:35632
Attributes
-
auth_value
9d006a439ab657f87bacd7a8c5f366b6
Targets
-
- Target dba6c48fecbda6b2c82d0cff77f26713
- Size 398KB
- SHA256 6c3c4bd6eaf42f187fd210cce41bbaf0343ce67f9029403e7626f50ec6aab2a4
- MD5 dba6c48fecbda6b2c82d0cff77f26713
- SHA1 ccb8f4a003be6dbc56bf778a7b094c322f62f0f0
- SHA512 2dd6f48eeaea642d8ada0ba5ea6c44b01ad10963d34599d2ee0ec9ac08946075e4e37f060e780e015a869be55da01d2f59993d07422442852e65a4da54a36d93
- MD5 SHA1 SHA512
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.