General
- Target 9cbbddd7d3833db0cff9069135579290.exe
- Size 341KB
- Sample210212-2lkn5fq9ce
- SHA256 a0e6efd5e5cbefe2a59d0f5d0aa4486a7857c4f7658cd36489c4f41fd3fd0382
- MD5 9cbbddd7d3833db0cff9069135579290
- SHA1 4a0bf6a8374902516d812d52e88ad4114cead3ba
- SHA512 2a764ce8f9523888859ffdc4411f17a28bf296421acd001b0bbc8d61e2534d61bdb084f3cd8d930e65ccc67e36db96511e5988f84305b9b088ce02fa8938d33f
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
9cbbddd7d3833db0cff9069135579290.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
9cbbddd7d3833db0cff9069135579290.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target 9cbbddd7d3833db0cff9069135579290.exe
- Size 341KB
- SHA256 a0e6efd5e5cbefe2a59d0f5d0aa4486a7857c4f7658cd36489c4f41fd3fd0382
- MD5 9cbbddd7d3833db0cff9069135579290
- SHA1 4a0bf6a8374902516d812d52e88ad4114cead3ba
- SHA512 2a764ce8f9523888859ffdc4411f17a28bf296421acd001b0bbc8d61e2534d61bdb084f3cd8d930e65ccc67e36db96511e5988f84305b9b088ce02fa8938d33f
- MD5 SHA1 SHA512
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.