General
- Target 0e068405ce30f54e043ab2c3841efe78.exe
- Size 175KB
- Sample221210-e4tm8seh69
- SHA256 9b0a43e39a04d4cb4cf508ab14b957d907071a682a4163e29cacbddf7cde968c
- MD5 0e068405ce30f54e043ab2c3841efe78
- SHA1 74cc1bcda934bdc8c406cb5d126917d559b15bf6
- SHA512 0cb861ade2f50f3380b7b66ea62acf4a37c76e09360311a969db20cfa46890a968a6420304ef7853a1174b39c979a1ed431d62ad35217c06a3635eff3d36bdea
- SSDEEP 3072:vxqZWJBaKULo37yEWGljSesSFIhYvTxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0k:ZqZI7yEWY3Ihy
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
0e068405ce30f54e043ab2c3841efe78.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
Mine
C2
-
31.41.244.186:4683
Attributes
-
auth_value
1b1e48ccc6e0797e3ac231cfeb9919b9
Targets
-
- Target 0e068405ce30f54e043ab2c3841efe78.exe
- Size 175KB
- SHA256 9b0a43e39a04d4cb4cf508ab14b957d907071a682a4163e29cacbddf7cde968c
- MD5 0e068405ce30f54e043ab2c3841efe78
- SHA1 74cc1bcda934bdc8c406cb5d126917d559b15bf6
- SHA512 0cb861ade2f50f3380b7b66ea62acf4a37c76e09360311a969db20cfa46890a968a6420304ef7853a1174b39c979a1ed431d62ad35217c06a3635eff3d36bdea
- SSDEEP 3072:vxqZWJBaKULo37yEWGljSesSFIhYvTxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0k:ZqZI7yEWY3Ihy
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.