General
- Target 2f10ba5891965dabfda17f7ed85837d4
- Size 338KB
- Sample210904-pjbl2aebe4
- SHA256 3452c19700d3f2ec14d731a042a1b86e19869bdc481b0c35c6fab9a48e2a53a2
- MD5 2f10ba5891965dabfda17f7ed85837d4
- SHA1 fac56e0246328fdcd09d7eb8ff78ab6ffd367c90
- SHA512 6c5013f065e16575847c043100e5082f33fa67c19349660154e56a84443f77f68888049d66a9994542e3be0821dc1ff911f71b43bc710ab7db639d5151fe72d1
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
2f10ba5891965dabfda17f7ed85837d4.exe
Resource
win7-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
nova
C2
-
91.142.77.129:60601
Targets
-
- Target 2f10ba5891965dabfda17f7ed85837d4
- Size 338KB
- SHA256 3452c19700d3f2ec14d731a042a1b86e19869bdc481b0c35c6fab9a48e2a53a2
- MD5 2f10ba5891965dabfda17f7ed85837d4
- SHA1 fac56e0246328fdcd09d7eb8ff78ab6ffd367c90
- SHA512 6c5013f065e16575847c043100e5082f33fa67c19349660154e56a84443f77f68888049d66a9994542e3be0821dc1ff911f71b43bc710ab7db639d5151fe72d1
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.