General
- Target SecuriteInfo.com.W32.AIDetect.malware1.9226.13564
- Size 325KB
- Sample220709-v3pkwsaab6
- SHA256 717a7bc855bf0e7a41ac02b8206308d7708446296ee5459ff1afe8deb09334db
- MD5 1db9f021dc670e43ab9c9f53fd50af7c
- SHA1 4d782289edcd04832cc306762361c29f43a3aaf9
- SHA512 1337228d38e0b2966b91b96b09a9f1c7cc2c2f5ece6468a8cdaa974fb799589421131c7c40525babc07a1b73715c484d0f789e735f1c8279543d71a02cf9f1c1
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.AIDetect.malware1.9226.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
RZ
C2
-
193.106.191.81:23196
Attributes
-
auth_value
4f816b599d2b63fb976620fbf8dcfd11
Targets
-
- Target SecuriteInfo.com.W32.AIDetect.malware1.9226.13564
- Size 325KB
- SHA256 717a7bc855bf0e7a41ac02b8206308d7708446296ee5459ff1afe8deb09334db
- MD5 1db9f021dc670e43ab9c9f53fd50af7c
- SHA1 4d782289edcd04832cc306762361c29f43a3aaf9
- SHA512 1337228d38e0b2966b91b96b09a9f1c7cc2c2f5ece6468a8cdaa974fb799589421131c7c40525babc07a1b73715c484d0f789e735f1c8279543d71a02cf9f1c1
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.