General
-
Target
9295afdeeb7fe726cf28d5098fbeb4bf
-
Size
278KB
-
Sample
210813-hc5sgc5y5s
-
MD5
9295afdeeb7fe726cf28d5098fbeb4bf
-
SHA1
19dc99357ea287698c925197efccc894276ff307
-
SHA256
6ad1cf3b42e1c571f6a7a402ad29e289ea119a6929345660a98e2786a3ddace4
-
SHA512
904b7077a61029b64ba362cafeac33de163eff14aaf9ed95b1bd144a9259144ed47d827309c3a884d39642cd40aeb471ad5bd3ab906c0222387b23c9ea04d9db
Static task
static1
Behavioral task
behavioral1
Sample
9295afdeeb7fe726cf28d5098fbeb4bf.exe
Resource
win7v20210410
Malware Config
Extracted
redline
UPD
193.56.146.78:54955
Targets
-
-
Target
9295afdeeb7fe726cf28d5098fbeb4bf
-
Size
278KB
-
MD5
9295afdeeb7fe726cf28d5098fbeb4bf
-
SHA1
19dc99357ea287698c925197efccc894276ff307
-
SHA256
6ad1cf3b42e1c571f6a7a402ad29e289ea119a6929345660a98e2786a3ddace4
-
SHA512
904b7077a61029b64ba362cafeac33de163eff14aaf9ed95b1bd144a9259144ed47d827309c3a884d39642cd40aeb471ad5bd3ab906c0222387b23c9ea04d9db
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-