General
- Target file.exe
- Size 349KB
- Sample221103-mkyrvahcd7
- SHA256 fa8cdcf833c5ba9277d5cde65c48492650b01d3f2a71f9cec04f4c97b970fa41
- MD5 13456a9a7b699f6eb3e4feabb5477381
- SHA1 8076f6e7a3c8553295ce927f27d50346f266f6d2
- SHA512 0f09ac9f0b4b6888476393732e26a03315033723ec7b2a9e202fd6043fb4186f46f98201b9270bf82e61543e373db050906e210ddbc0cae54396f539baf54315
- SSDEEP 6144:ejDh7fqkLAXxOXuuWDIFBWsXlPbEzDs0G89acoI:ejt7DsXxvwWsVbCda0
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
mix
C2
-
193.106.191.25:47242
Attributes
-
auth_value
5469d87831a100553f2f10d3aadec8bb
Targets
-
- Target file.exe
- Size 349KB
- SHA256 fa8cdcf833c5ba9277d5cde65c48492650b01d3f2a71f9cec04f4c97b970fa41
- MD5 13456a9a7b699f6eb3e4feabb5477381
- SHA1 8076f6e7a3c8553295ce927f27d50346f266f6d2
- SHA512 0f09ac9f0b4b6888476393732e26a03315033723ec7b2a9e202fd6043fb4186f46f98201b9270bf82e61543e373db050906e210ddbc0cae54396f539baf54315
- SSDEEP 6144:ejDh7fqkLAXxOXuuWDIFBWsXlPbEzDs0G89acoI:ejt7DsXxvwWsVbCda0
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.