General
- Target 4508061c16069acdf64b655774eb869a
- Size 316KB
- Sample210715-8215dwxffa
- SHA256 8cc4a0ce91480663515a021ce82ce20b2b176b5c541fa09dbf3565517c4d5f8f
- MD5 4508061c16069acdf64b655774eb869a
- SHA1 2733a6f0449a7e196c92c4585fb19ed60d7ac3b5
- SHA512 fbe897bc65b2f7a06832882cb3b1130e9bee1805f7a7c798c49b0ebf171a00210276810480f465b612a4e343c0d355d241e114b94b91cddf2fd9567386093c5a
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
4508061c16069acdf64b655774eb869a.exe
Resource
win7v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
Updt01
C2
-
176.111.174.254:56328
Targets
-
- Target 4508061c16069acdf64b655774eb869a
- Size 316KB
- SHA256 8cc4a0ce91480663515a021ce82ce20b2b176b5c541fa09dbf3565517c4d5f8f
- MD5 4508061c16069acdf64b655774eb869a
- SHA1 2733a6f0449a7e196c92c4585fb19ed60d7ac3b5
- SHA512 fbe897bc65b2f7a06832882cb3b1130e9bee1805f7a7c798c49b0ebf171a00210276810480f465b612a4e343c0d355d241e114b94b91cddf2fd9567386093c5a
- MD5 SHA1 SHA512
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine Payload
Accesses cryptocurrency files/wallets, possible credential harvesting
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.