General
-
Target
0AB55CD5D1FBF6C3EA904ED1A0590435.exe
-
Size
92KB
-
Sample
210616-978dwp8hza
-
MD5
0ab55cd5d1fbf6c3ea904ed1a0590435
-
SHA1
41051912fb70364526a64b0531fc08ab93d9de6d
-
SHA256
48b88580c017ca6823e1aa41264c28d3d27bab5a4a6a32c56d22828cfa13a44c
-
SHA512
2cee6423a17bbe80e8cbd85f123dc6f626cc010b634c82d3e0900b8d8fbf463220342f078441087c9e4a00b590ea41774c42d416f615c1f3e5c543392810e929
Behavioral task
behavioral1
Sample
0AB55CD5D1FBF6C3EA904ED1A0590435.exe
Resource
win7v20210410
Behavioral task
behavioral2
Sample
0AB55CD5D1FBF6C3EA904ED1A0590435.exe
Resource
win10v20210410
Malware Config
Extracted
redline
YT
5.196.99.128:8616
Targets
-
-
Target
0AB55CD5D1FBF6C3EA904ED1A0590435.exe
-
Size
92KB
-
MD5
0ab55cd5d1fbf6c3ea904ed1a0590435
-
SHA1
41051912fb70364526a64b0531fc08ab93d9de6d
-
SHA256
48b88580c017ca6823e1aa41264c28d3d27bab5a4a6a32c56d22828cfa13a44c
-
SHA512
2cee6423a17bbe80e8cbd85f123dc6f626cc010b634c82d3e0900b8d8fbf463220342f078441087c9e4a00b590ea41774c42d416f615c1f3e5c543392810e929
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-