General
-
Target
80952ffe0e742d90fcd82f8f580acdbeb549c9d544d90812dc5d122de228cc8e
-
Size
398KB
-
Sample
210726-xa3lphw6rs
-
MD5
647afb78ad3a6e8fd13a7752f86af961
-
SHA1
ba17d7c3bf39d81da8f9f76f18b6e7ad39f02f7a
-
SHA256
80952ffe0e742d90fcd82f8f580acdbeb549c9d544d90812dc5d122de228cc8e
-
SHA512
25f4675e98405ee7501beab2078f7a886880a5e520865a6f42e997359b909ebbd46333af876b24524e975f520a4b08ea266fd8328880e6e8559b8c2cb2899251
Static task
static1
Behavioral task
behavioral1
Sample
80952ffe0e742d90fcd82f8f580acdbeb549c9d544d90812dc5d122de228cc8e.exe
Resource
win10v20210410
Malware Config
Extracted
redline
SewPalpadin
185.215.113.114:8887
Targets
-
-
Target
80952ffe0e742d90fcd82f8f580acdbeb549c9d544d90812dc5d122de228cc8e
-
Size
398KB
-
MD5
647afb78ad3a6e8fd13a7752f86af961
-
SHA1
ba17d7c3bf39d81da8f9f76f18b6e7ad39f02f7a
-
SHA256
80952ffe0e742d90fcd82f8f580acdbeb549c9d544d90812dc5d122de228cc8e
-
SHA512
25f4675e98405ee7501beab2078f7a886880a5e520865a6f42e997359b909ebbd46333af876b24524e975f520a4b08ea266fd8328880e6e8559b8c2cb2899251
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-