General
- Target 193a73d36aac1b324e699a1b132d18bf.exe
- Size 327KB
- Sample220715-l83j9saee9
- SHA256 4afcdfd63feabd83d6b7c147f665b21840ac89d8804ad952d8a76e31781e76f6
- MD5 193a73d36aac1b324e699a1b132d18bf
- SHA1 c68eddb38966a0c438fe59b2b95fc44caf3d2087
- SHA512 6e7c19c1f551197d4b34ddb46afbe1fb0719109f14b24659ec71269c7a127fc2f278adda363ab3111f1aac3de80c22769a6e7011b5e61659e18cf853ca6224b2
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
193a73d36aac1b324e699a1b132d18bf.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
sbroker
C2
-
synchbrokers.asia:80
Attributes
-
auth_value
c4127e171f8cf527a80517d52e76a16b
Targets
-
- Target 193a73d36aac1b324e699a1b132d18bf.exe
- Size 327KB
- SHA256 4afcdfd63feabd83d6b7c147f665b21840ac89d8804ad952d8a76e31781e76f6
- MD5 193a73d36aac1b324e699a1b132d18bf
- SHA1 c68eddb38966a0c438fe59b2b95fc44caf3d2087
- SHA512 6e7c19c1f551197d4b34ddb46afbe1fb0719109f14b24659ec71269c7a127fc2f278adda363ab3111f1aac3de80c22769a6e7011b5e61659e18cf853ca6224b2
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.