General
- Target file.exe
- Size 443KB
- Sample221102-zbveaabfb5
- SHA256 5f18710df865427fef9a24625c4febcbfc6d3392d875139ffc4fe82f46a21762
- MD5 d6e1dd18c01a11c79561aaa67b4ef461
- SHA1 0910d2f7492f991d34c0591dc4590e39de0ffcac
- SHA512 ac2a1644a49bd123c51f18b35883d331f80ea3ad835dae7c18f3beb5391c87d2845efe91909edc0101df6fc129e1f83827d3ed74467a96f16466797afcebb957
- SSDEEP 6144:v/2LNUL0hsakvnEE81htg3oQohgrzdWT+5AvM7ITsq:v/2RULpa8ET1jIoQ1r5WXvM7
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
mix
C2
-
193.106.191.25:47242
Attributes
-
auth_value
5469d87831a100553f2f10d3aadec8bb
Targets
-
- Target file.exe
- Size 443KB
- SHA256 5f18710df865427fef9a24625c4febcbfc6d3392d875139ffc4fe82f46a21762
- MD5 d6e1dd18c01a11c79561aaa67b4ef461
- SHA1 0910d2f7492f991d34c0591dc4590e39de0ffcac
- SHA512 ac2a1644a49bd123c51f18b35883d331f80ea3ad835dae7c18f3beb5391c87d2845efe91909edc0101df6fc129e1f83827d3ed74467a96f16466797afcebb957
- SSDEEP 6144:v/2LNUL0hsakvnEE81htg3oQohgrzdWT+5AvM7ITsq:v/2RULpa8ET1jIoQ1r5WXvM7
- MD5 SHA1 SHA512 SSDEEP
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Accesses cryptocurrency files/wallets, possible credential harvesting
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.