General
- Target e1ec9502eb70627deaab9e1646d59183.exe
- Size 404KB
- Sample220524-xmglfseca8
- SHA256 4e28a361c5940d1d9e2bc0f4e126481028a5fc6bf86c1275046ebdaf7eece1e4
- MD5 e1ec9502eb70627deaab9e1646d59183
- SHA1 9833c4a132cb31712b7c2ff415d1ddc1ba3c0c38
- SHA512 7aa997a247eb42e4410f9b07adf26c108bb1394c1bdc94a18e158e7d2b5ee6387b677532334f59c1a0b37a19eaf325a78e2cfa81bd466b6dd81a780c4af09e12
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
e1ec9502eb70627deaab9e1646d59183.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
mta
C2
-
193.106.191.222:23196
Attributes
-
auth_value
3d0a7300fdf6b2ac6ae9081b1a400e64
Targets
-
- Target e1ec9502eb70627deaab9e1646d59183.exe
- Size 404KB
- SHA256 4e28a361c5940d1d9e2bc0f4e126481028a5fc6bf86c1275046ebdaf7eece1e4
- MD5 e1ec9502eb70627deaab9e1646d59183
- SHA1 9833c4a132cb31712b7c2ff415d1ddc1ba3c0c38
- SHA512 7aa997a247eb42e4410f9b07adf26c108bb1394c1bdc94a18e158e7d2b5ee6387b677532334f59c1a0b37a19eaf325a78e2cfa81bd466b6dd81a780c4af09e12
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.