General
- Target BitcoinRush-setup-x64.exe.exe
- Size 51.2MB
- Sample240212-jk9bsshg97
- SHA256 e2949dedfbaf174b775c0ccbe2f49d9edb28e554869d772af5f985e97019a407
- MD5 2722bfb892136c75839c496d526bdaff
- SHA1 3f13a9dd9a08d1a4b3f6cb262224999399e7ec44
- SHA512 a1671fa38be266c274ddae9a6dfed1222c78e7dcad9de297908d9f2fe7e6597e522641866b25011b7d5c658c0e427b488919e299ece559668004bae891753957
- SSDEEP 1572864:E8QciiB2m+Farfjt36GDq8bk7JnaFAFJQ2hgd/wPpkTJ:E6LBL+Fc9Je8wlnVFfgd/PT
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
BitcoinRush-setup-x64.exe
Resource
win7-20231129-en
10 signatures
60 seconds
Behavioral task
behavioral2
Sample
BitcoinRush-setup-x64.exe
Resource
win10v2004-20231215-en
4 signatures
60 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
BITCOIN RUSH
C2
-
35.246.121.56:48082
Targets
-
- Target BitcoinRush-setup-x64.exe.exe
- Size 51.2MB
- SHA256 e2949dedfbaf174b775c0ccbe2f49d9edb28e554869d772af5f985e97019a407
- MD5 2722bfb892136c75839c496d526bdaff
- SHA1 3f13a9dd9a08d1a4b3f6cb262224999399e7ec44
- SHA512 a1671fa38be266c274ddae9a6dfed1222c78e7dcad9de297908d9f2fe7e6597e522641866b25011b7d5c658c0e427b488919e299ece559668004bae891753957
- SSDEEP 1572864:E8QciiB2m+Farfjt36GDq8bk7JnaFAFJQ2hgd/wPpkTJ:E6LBL+Fc9Je8wlnVFfgd/PT
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
SectopRAT payload
-
Executes dropped EXE
-
Loads dropped DLL