General
-
Target
a62c5a454bd3521279f0fa4c7f1a4d65.exe
-
Size
92KB
-
Sample
210502-jh8w7peqm2
-
MD5
a62c5a454bd3521279f0fa4c7f1a4d65
-
SHA1
e6f947f2fdd3e098a2430d8f7ff16f715ad22325
-
SHA256
02dc6be1236619f66bc7dc620221572065a1bc78169c663541522baaa96713b5
-
SHA512
5f4d1b0ddfe7b6f8eed381e6998b555c7cb80a3029d0e1f273380ace325412a6cbe45f3b0e50e565b7a6fd10d86fc75b4993b3cd0b2bec607e7731a87015f777
Static task
static1
Behavioral task
behavioral1
Sample
a62c5a454bd3521279f0fa4c7f1a4d65.exe
Resource
win7v20210408
Behavioral task
behavioral2
Sample
a62c5a454bd3521279f0fa4c7f1a4d65.exe
Resource
win10v20210410
Malware Config
Extracted
redline
1315598753
52.14.161.64:25486
Targets
-
-
Target
a62c5a454bd3521279f0fa4c7f1a4d65.exe
-
Size
92KB
-
MD5
a62c5a454bd3521279f0fa4c7f1a4d65
-
SHA1
e6f947f2fdd3e098a2430d8f7ff16f715ad22325
-
SHA256
02dc6be1236619f66bc7dc620221572065a1bc78169c663541522baaa96713b5
-
SHA512
5f4d1b0ddfe7b6f8eed381e6998b555c7cb80a3029d0e1f273380ace325412a6cbe45f3b0e50e565b7a6fd10d86fc75b4993b3cd0b2bec607e7731a87015f777
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-