General
- Target a9fa91b3cf30e71cc5397dfd741199c8
- Size 325KB
- Sample220711-2dmtbsddbr
- SHA256 6a2e0a9a2742cfb51cb52672e232c308a3297f8d11d428922825deb9d87f38ee
- MD5 a9fa91b3cf30e71cc5397dfd741199c8
- SHA1 dd0641813fd45cac5d61b6b5d656fec87bf764d6
- SHA512 7ed51a86838ce60ad24ce1a48fc2a76663599c0860fb1b3f9cdb13c020e3e7288ef4bf1724ac3179107b3cb80d9593a7ae946f9b2baec79556aee46d558009b2
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
a9fa91b3cf30e71cc5397dfd741199c8.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
MrMinister
C2
-
193.233.48.58:43014
Attributes
-
auth_value
d1403f5f98835d1f400590c6742e5155
Targets
-
- Target a9fa91b3cf30e71cc5397dfd741199c8
- Size 325KB
- SHA256 6a2e0a9a2742cfb51cb52672e232c308a3297f8d11d428922825deb9d87f38ee
- MD5 a9fa91b3cf30e71cc5397dfd741199c8
- SHA1 dd0641813fd45cac5d61b6b5d656fec87bf764d6
- SHA512 7ed51a86838ce60ad24ce1a48fc2a76663599c0860fb1b3f9cdb13c020e3e7288ef4bf1724ac3179107b3cb80d9593a7ae946f9b2baec79556aee46d558009b2
- MD5 SHA1 SHA512
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.