General
- Target 5969de4a29daaccbf4323538266c54f1.exe
- Size 362KB
- Sample221113-2px4fage8v
- SHA256 088a8d10ea1bc1510ee4989ffe7e26eebb7b3181875c48449dcc175a980d33bb
- MD5 5969de4a29daaccbf4323538266c54f1
- SHA1 06139d9c6e4273d2cfbac3041be75140a44c5f70
- SHA512 99b06f738c0ccc1e3186d57b44944c3ccdca949c861e2bd7e573f8d27bd7e4e176ea7d6b7c594152ae47280024850c5dc603e385e848ba22856ef17eefbd805a
- SSDEEP 6144:6xyRAw6Ew48LKkJbPdkFBuHxJ6ZWhmIWfdOsZAuHBu6WrJCNOGMKOMKvF8Ie:6xsAMCekJbPdRxJ6MgTns6WrsOGM8Kvi
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
5969de4a29daaccbf4323538266c54f1.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
fivem
C2
-
fivemonitoring.com:80
Attributes
-
auth_value
fff7de14b88315db0636624183b17a2a
Targets
-
- Target 5969de4a29daaccbf4323538266c54f1.exe
- Size 362KB
- SHA256 088a8d10ea1bc1510ee4989ffe7e26eebb7b3181875c48449dcc175a980d33bb
- MD5 5969de4a29daaccbf4323538266c54f1
- SHA1 06139d9c6e4273d2cfbac3041be75140a44c5f70
- SHA512 99b06f738c0ccc1e3186d57b44944c3ccdca949c861e2bd7e573f8d27bd7e4e176ea7d6b7c594152ae47280024850c5dc603e385e848ba22856ef17eefbd805a
- SSDEEP 6144:6xyRAw6Ew48LKkJbPdkFBuHxJ6ZWhmIWfdOsZAuHBu6WrJCNOGMKOMKvF8Ie:6xsAMCekJbPdRxJ6MgTns6WrsOGM8Kvi
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.