General
-
Target
unpacked_02660000.bin
-
Size
188KB
-
Sample
210926-n8gc5segh9
-
MD5
d99f2f0f5ef98ceb6fd52c8b9979473e
-
SHA1
09e54c31eb5f38f00e6daff084253f5d06d357fa
-
SHA256
5508c235113e3822e619df7b455a20a49cafec0efa004ddf20dfccfc99e52900
-
SHA512
61df0400e650b2100231be71bcaacf45e6520d67c1ea1e9b5afa68b4fb38bb60a9d328706b916ced7901f8282066e8e149cffd7d5a547d7a874aeacbef654b15
Static task
static1
Behavioral task
behavioral1
Sample
unpacked_02660000.bin.exe
Resource
win7-en-20210920
Malware Config
Extracted
redline
UTS
45.9.20.20:13441
Targets
-
-
Target
unpacked_02660000.bin
-
Size
188KB
-
MD5
d99f2f0f5ef98ceb6fd52c8b9979473e
-
SHA1
09e54c31eb5f38f00e6daff084253f5d06d357fa
-
SHA256
5508c235113e3822e619df7b455a20a49cafec0efa004ddf20dfccfc99e52900
-
SHA512
61df0400e650b2100231be71bcaacf45e6520d67c1ea1e9b5afa68b4fb38bb60a9d328706b916ced7901f8282066e8e149cffd7d5a547d7a874aeacbef654b15
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-