c66fb8fbea8c3b399d02bc164b98aad6210d6903045a17f37f8b2732653231f0.exe

Classification: Malicious

c66fb8fbea8c3b399d02bc164b98aad6210d6903045a17f37f8b2732653231f0.exe is a malicious file sample. Linked to Redline Stealer malware.

Detection summary

  • 0 antivirus detections
  • 1 IDS alerts
  • 9 processes observed
  • 1 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: REDLINE STEALER (S1240)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Mystic Triage 2026-03-17 10:55:37 2026-03-17 10:55:37 malicious-activity
Generic Malware Hybrid-Analysis 2025-05-03 13:45:08 2025-05-03 15:00:47
RedLineStealer MalwareBazaar Abuse.ch 2023-11-10 04:55:44 2023-11-10 04:55:44 malicious-activity S1240 RedLine Stealer

Tags

mystic redline taiga discovery infostealer persistence stealer

Sample information

Filenames
c66fb8fbea8c3b399d02bc164b98aad6210d6903045a17f37f8b2732653231f0.exe, 98be1b9a3590de874f72cdc4d971e39c.exe
File type
application/x-dosexec
Size
523264 bytes
MD5
98be1b9a3590de874f72cdc4d971e39c
SHA-1
284f405d235eb5f5a32cea90eb5232d2146a613d
SHA-256
c66fb8fbea8c3b399d02bc164b98aad6210d6903045a17f37f8b2732653231f0
SHA-512
4efbbdf6e7cff625c5892db8bc281695e171a6fd3bf6de63105a321f5ef3cb1c1b8ffccf6fd1e8590d1fa4e2f76c1ccceaeef0d508ae5a68875fce5f385aca6e
First indexed
2023-11-10 06:20:31
Last updated
2026-09-02 15:34:11

Network contacts

5.42.92.51

Process list

NameCommand line
c66fb8fbea8c3b399d02bc164b98aad6210d6903045a17f37f8b2732653231f0.exe
ED6SW77.exe
1QD46NM7.exe
AppLaunch.exe
AppLaunch.exe
2gW7039.exe
AppLaunch.exe
7Zp0jr70.exe
cmd.exe%WINDIR%\system32\cmd.exe /c ""%TEMP%\is64.bat" "