General
-
Target
2d63e1bab3cf46467eb87d48736f9536.exe
-
Size
315KB
-
Sample
210421-xywxj68y66
-
MD5
2d63e1bab3cf46467eb87d48736f9536
-
SHA1
11b316a46fcd2b781604076f3d5bfa3a68ba014e
-
SHA256
02f5e35764a466a562681a6fd7d64e85bbb9a3369b66b4234919810f7c1ff9d5
-
SHA512
86f46468f89e046c6e8a9756f620d93494fdfd3ae18410a90d60863bffe77c8c0cbf2c52281fb4217e86dc5cb2ba3f8342a703b423d429f92e3855a2f680d6b1
Static task
static1
Behavioral task
behavioral1
Sample
2d63e1bab3cf46467eb87d48736f9536.exe
Resource
win7v20210408
Malware Config
Extracted
redline
118
bumblebee2021.store:80
trusmileveneers.store:80
lazerprojekt.store:80
Targets
-
-
Target
2d63e1bab3cf46467eb87d48736f9536.exe
-
Size
315KB
-
MD5
2d63e1bab3cf46467eb87d48736f9536
-
SHA1
11b316a46fcd2b781604076f3d5bfa3a68ba014e
-
SHA256
02f5e35764a466a562681a6fd7d64e85bbb9a3369b66b4234919810f7c1ff9d5
-
SHA512
86f46468f89e046c6e8a9756f620d93494fdfd3ae18410a90d60863bffe77c8c0cbf2c52281fb4217e86dc5cb2ba3f8342a703b423d429f92e3855a2f680d6b1
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-