General
- Target SecuriteInfo.com.Variant.Fugrafa.260198.5199.22175
- Size 333KB
- Sample220709-2hnw7abbb7
- SHA256 602000394de3c94f4b6427c4ac6ffdba915aa87ccf5a178109daafaa34e1f3ac
- MD5 6a55eec26bf0f96d51c0187203467893
- SHA1 7b87eadf09119e15e8d0bacff168c8db81c688bc
- SHA512 a53ad2af1b101eb0c0f7c066971b6fbe1a71a1fba8648f3ac42481b25e6b001e5ccec4086c9bcc4171f935209236a03aba261a55f92a1be3aae3715f6d11a1e0
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Variant.Fugrafa.260198.5199.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
Some
C2
-
193.233.48.49:41386
Attributes
-
auth_value
66c6866716be6e360aa3372c16d173ac
Targets
-
- Target SecuriteInfo.com.Variant.Fugrafa.260198.5199.22175
- Size 333KB
- SHA256 602000394de3c94f4b6427c4ac6ffdba915aa87ccf5a178109daafaa34e1f3ac
- MD5 6a55eec26bf0f96d51c0187203467893
- SHA1 7b87eadf09119e15e8d0bacff168c8db81c688bc
- SHA512 a53ad2af1b101eb0c0f7c066971b6fbe1a71a1fba8648f3ac42481b25e6b001e5ccec4086c9bcc4171f935209236a03aba261a55f92a1be3aae3715f6d11a1e0
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.