General
- Target 73b23118aeaa25445f8ef18627feb47d.exe
- Size 376KB
- Sample221024-r757nahcdm
- SHA256 5d4c2699d49072d4673f0a613a81f7fad66aa5f17ffba5efc0490fab1c01b656
- MD5 73b23118aeaa25445f8ef18627feb47d
- SHA1 48bf94181a7464bf47cc75b82f78f25cc03bcb06
- SHA512 832f775b84ba171c56f4c58f8a294fc484695606cae329eee88106d2f5674d90d823db52725a2763bb94d8a1599abd767e7a1c16575a0b91da85d35fe0491201
- SSDEEP 6144:wbHRLcsp1cVXTCsH4yNO03dmCY7UXlGM+y0oXTHHuS:wtAsuXOszN/umGMOojHH
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
73b23118aeaa25445f8ef18627feb47d.exe
Resource
win7-20220901-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
fivem
C2
-
fivemonitoring.com:80
Attributes
-
auth_value
fff7de14b88315db0636624183b17a2a
Targets
-
- Target 73b23118aeaa25445f8ef18627feb47d.exe
- Size 376KB
- SHA256 5d4c2699d49072d4673f0a613a81f7fad66aa5f17ffba5efc0490fab1c01b656
- MD5 73b23118aeaa25445f8ef18627feb47d
- SHA1 48bf94181a7464bf47cc75b82f78f25cc03bcb06
- SHA512 832f775b84ba171c56f4c58f8a294fc484695606cae329eee88106d2f5674d90d823db52725a2763bb94d8a1599abd767e7a1c16575a0b91da85d35fe0491201
- SSDEEP 6144:wbHRLcsp1cVXTCsH4yNO03dmCY7UXlGM+y0oXTHHuS:wtAsuXOszN/umGMOojHH
- MD5 SHA1 SHA512 SSDEEP
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Accesses cryptocurrency files/wallets, possible credential harvesting
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.