General
-
Target
62a050d59c89ba86e7c6904843051bc59c930f2b9b19f0cb95370daf243c9550
-
Size
395KB
-
Sample
210725-3d4nn7lcy6
-
MD5
482ff39ce271dff3ca9f31dce9e504d7
-
SHA1
5a0c8ca7eb44e07809064a4bea5f8a158bcaf6c2
-
SHA256
62a050d59c89ba86e7c6904843051bc59c930f2b9b19f0cb95370daf243c9550
-
SHA512
5d69c4f0f8cdddc4a1c51940c3028874bcb72deca490df01be0a82dcb17e32aaa4f188a3f6e842f9193a555a8955cc659ba160f76b3a3c9778f66e4813a8a948
Static task
static1
Behavioral task
behavioral1
Sample
62a050d59c89ba86e7c6904843051bc59c930f2b9b19f0cb95370daf243c9550.exe
Resource
win10v20210410
Malware Config
Extracted
redline
SewPalpadin
185.215.113.114:8887
Targets
-
-
Target
62a050d59c89ba86e7c6904843051bc59c930f2b9b19f0cb95370daf243c9550
-
Size
395KB
-
MD5
482ff39ce271dff3ca9f31dce9e504d7
-
SHA1
5a0c8ca7eb44e07809064a4bea5f8a158bcaf6c2
-
SHA256
62a050d59c89ba86e7c6904843051bc59c930f2b9b19f0cb95370daf243c9550
-
SHA512
5d69c4f0f8cdddc4a1c51940c3028874bcb72deca490df01be0a82dcb17e32aaa4f188a3f6e842f9193a555a8955cc659ba160f76b3a3c9778f66e4813a8a948
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-