General
-
Target
38d2ad230a1840cddf8821dd80d75661a7fbf90761cdfecf49312bd50c31fc67
-
Size
394KB
-
Sample
210726-f48wxr84ge
-
MD5
c839ff5eaf9fe9f988ee906046b76b7e
-
SHA1
3a762b3e9de9bd97e574f9e810464cb9baa2ad58
-
SHA256
38d2ad230a1840cddf8821dd80d75661a7fbf90761cdfecf49312bd50c31fc67
-
SHA512
e37966212853b09cc29cb5a68cfa921b06a6e2d0a543da23f307bcec6422db26da2fbb4a189ac2182380a80057c5a76b3f36139fa3ce62fbbd6e16dbd0ffdd9f
Static task
static1
Behavioral task
behavioral1
Sample
38d2ad230a1840cddf8821dd80d75661a7fbf90761cdfecf49312bd50c31fc67.exe
Resource
win10v20210408
Malware Config
Extracted
redline
SewPalpadin
185.215.113.114:8887
Targets
-
-
Target
38d2ad230a1840cddf8821dd80d75661a7fbf90761cdfecf49312bd50c31fc67
-
Size
394KB
-
MD5
c839ff5eaf9fe9f988ee906046b76b7e
-
SHA1
3a762b3e9de9bd97e574f9e810464cb9baa2ad58
-
SHA256
38d2ad230a1840cddf8821dd80d75661a7fbf90761cdfecf49312bd50c31fc67
-
SHA512
e37966212853b09cc29cb5a68cfa921b06a6e2d0a543da23f307bcec6422db26da2fbb4a189ac2182380a80057c5a76b3f36139fa3ce62fbbd6e16dbd0ffdd9f
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-