General
-
Target
9c475d84307dae5a6d5b9f5d219e6f8dd497952db2a4068399f6b1fe858802ea
-
Size
381KB
-
Sample
210727-kq19rwlhn6
-
MD5
bad151b059bc5e64585c2e8da4ec1844
-
SHA1
0422653e96d107714ab6a00fcda6cbba180165ff
-
SHA256
9c475d84307dae5a6d5b9f5d219e6f8dd497952db2a4068399f6b1fe858802ea
-
SHA512
da8cc0048249ae254db8b0762ced25cd5f7a8307a5629231de2f50c90b8b8f79961f3236e22e5f6ab7aa29c57a52fcdc88bfcf975c8082b9108a2a52868b7a6b
Static task
static1
Behavioral task
behavioral1
Sample
9c475d84307dae5a6d5b9f5d219e6f8dd497952db2a4068399f6b1fe858802ea.exe
Resource
win10v20210410
Malware Config
Extracted
redline
SewPalpadin
185.215.113.114:8887
Targets
-
-
Target
9c475d84307dae5a6d5b9f5d219e6f8dd497952db2a4068399f6b1fe858802ea
-
Size
381KB
-
MD5
bad151b059bc5e64585c2e8da4ec1844
-
SHA1
0422653e96d107714ab6a00fcda6cbba180165ff
-
SHA256
9c475d84307dae5a6d5b9f5d219e6f8dd497952db2a4068399f6b1fe858802ea
-
SHA512
da8cc0048249ae254db8b0762ced25cd5f7a8307a5629231de2f50c90b8b8f79961f3236e22e5f6ab7aa29c57a52fcdc88bfcf975c8082b9108a2a52868b7a6b
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-