General
- Target 79c84db0f4654d84699aa78e5d9cc182
- Size 398KB
- Sample211103-hwjpvaadhr
- SHA256 46a8588f910985090eef1f0088b1cf13487ef877102e89328319a5293f6694db
- MD5 79c84db0f4654d84699aa78e5d9cc182
- SHA1 c16dea342e0d0a6a452fb186db873a477bf213c0
- SHA512 2e2347406d3adc2b16da924b468d3815835234d1b2542e19d4d33eb4925cb53e7449f40a7f865af45f236ea95ebb6ac2e32799dd3e992784fe5cf364f30320e1
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
79c84db0f4654d84699aa78e5d9cc182.exe
Resource
win7-en-20211014
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
Pubdate
C2
-
193.56.146.64:65441
Targets
-
- Target 79c84db0f4654d84699aa78e5d9cc182
- Size 398KB
- SHA256 46a8588f910985090eef1f0088b1cf13487ef877102e89328319a5293f6694db
- MD5 79c84db0f4654d84699aa78e5d9cc182
- SHA1 c16dea342e0d0a6a452fb186db873a477bf213c0
- SHA512 2e2347406d3adc2b16da924b468d3815835234d1b2542e19d4d33eb4925cb53e7449f40a7f865af45f236ea95ebb6ac2e32799dd3e992784fe5cf364f30320e1
- MD5 SHA1 SHA512
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine Payload
Accesses cryptocurrency files/wallets, possible credential harvesting
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.