General
- Target SecuriteInfo.com.Variant.Mikey.146607.21532.27715.exe
- Size 292KB
- Sample230618-lfww1sff2s
- SHA256 4e7f672083633d0834027722071b347415543bbcec7a2afe7a3450535d710a73
- MD5 f021a4cd191c7b3cd9430a385f02cfd6
- SHA1 488ab8a39b4360ed1dba3672ec8aba279e89111c
- SHA512 017293dda17ad67750ed2749a8389ad43305d8622cd7df46a439beb712a1b9f3c327e6677df6dbeb790444bfb1034a1b34da000ba65d74306d8b4629f163c151
- SSDEEP 6144:0iidloDdY7wkREvA7MZi/AaOU6uAlTxGj01jQJQmZ:QdyZYHYaOU6xTxjQJQmZ
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Variant.Mikey.146607.21532.27715.exe
Resource
win7-20230220-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Variant.Mikey.146607.21532.27715.exe
Resource
win10v2004-20230220-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
Private CLOUD
C2
-
176.123.9.85:16482
Attributes
-
auth_value
cf18ee275aee7449ba89afcffb586f89
Targets
-
- Target SecuriteInfo.com.Variant.Mikey.146607.21532.27715.exe
- Size 292KB
- SHA256 4e7f672083633d0834027722071b347415543bbcec7a2afe7a3450535d710a73
- MD5 f021a4cd191c7b3cd9430a385f02cfd6
- SHA1 488ab8a39b4360ed1dba3672ec8aba279e89111c
- SHA512 017293dda17ad67750ed2749a8389ad43305d8622cd7df46a439beb712a1b9f3c327e6677df6dbeb790444bfb1034a1b34da000ba65d74306d8b4629f163c151
- SSDEEP 6144:0iidloDdY7wkREvA7MZi/AaOU6uAlTxGj01jQJQmZ:QdyZYHYaOU6xTxjQJQmZ
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.