General
- Target 6b50446bfebf575465064fda5ad42b4d
- Size 327KB
- Sample220715-ex53padefn
- SHA256 94f6b6d5cd414c775aeecaa12293e1fa37cc01d040fed1b8fbbd5177de71a28c
- MD5 6b50446bfebf575465064fda5ad42b4d
- SHA1 c56189d70438b980428c0d88d55234adb40e5c46
- SHA512 eba1ec49ffd8fd28ee412ce3dfc871ee766fe4bfa4d026255304fbd185139f5cb0001c94e794aa3173c6f9ea8c83acbd4d45d0a1cfaee41ccaa527ca20a326ae
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
6b50446bfebf575465064fda5ad42b4d.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
RZ
C2
-
193.106.191.81:23196
Attributes
-
auth_value
4f816b599d2b63fb976620fbf8dcfd11
Targets
-
- Target 6b50446bfebf575465064fda5ad42b4d
- Size 327KB
- SHA256 94f6b6d5cd414c775aeecaa12293e1fa37cc01d040fed1b8fbbd5177de71a28c
- MD5 6b50446bfebf575465064fda5ad42b4d
- SHA1 c56189d70438b980428c0d88d55234adb40e5c46
- SHA512 eba1ec49ffd8fd28ee412ce3dfc871ee766fe4bfa4d026255304fbd185139f5cb0001c94e794aa3173c6f9ea8c83acbd4d45d0a1cfaee41ccaa527ca20a326ae
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.