General
- Target 86826dfcbb36cc99222d8a68d27b66561ec86506d9c07.exe
- Size 295KB
- Sample220721-1w7e1saec9
- SHA256 86826dfcbb36cc99222d8a68d27b66561ec86506d9c07802b2a04fc043903e5e
- MD5 33e087792e8de2090cc349a80eb15f36
- SHA1 34243b80dfc45733d2e94ef6830cc2b13da47d1a
- SHA512 e1890bd2fcaa91adef3221ac434bdb457e67dcda2469e64961aa7fca67fed9e7f37bdfd407b0c15601a6826901d4179113f9b05c5e636ac40b1d9e76c23cd237
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
86826dfcbb36cc99222d8a68d27b66561ec86506d9c07.exe
Resource
win7-20220718-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
sbroker
C2
-
synchbrokers.asia:80
Attributes
-
auth_value
c4127e171f8cf527a80517d52e76a16b
Targets
-
- Target 86826dfcbb36cc99222d8a68d27b66561ec86506d9c07.exe
- Size 295KB
- SHA256 86826dfcbb36cc99222d8a68d27b66561ec86506d9c07802b2a04fc043903e5e
- MD5 33e087792e8de2090cc349a80eb15f36
- SHA1 34243b80dfc45733d2e94ef6830cc2b13da47d1a
- SHA512 e1890bd2fcaa91adef3221ac434bdb457e67dcda2469e64961aa7fca67fed9e7f37bdfd407b0c15601a6826901d4179113f9b05c5e636ac40b1d9e76c23cd237
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.