General
-
Target
9b6a7db9202742073407252d5db59ded5b938f7c2e2383b00e87857f122be3bc
-
Size
441KB
-
Sample
211022-1cpqvsdadr
-
MD5
61a4cfad52834c537ae1411a388e755c
-
SHA1
e6d3f757b47c458dcb12f739924e0bce1f4b0afd
-
SHA256
9b6a7db9202742073407252d5db59ded5b938f7c2e2383b00e87857f122be3bc
-
SHA512
96e136b44e83627f050b69e2f61ca4a1444028337d14d8c1897263c34d268fd225f32badba5e8ca9318a77d6bb073550ad2124b0c81697d82e53323c01e84da8
Static task
static1
Behavioral task
behavioral1
Sample
9b6a7db9202742073407252d5db59ded5b938f7c2e2383b00e87857f122be3bc.exe
Resource
win10-en-20210920
Malware Config
Targets
-
-
Target
9b6a7db9202742073407252d5db59ded5b938f7c2e2383b00e87857f122be3bc
-
Size
441KB
-
MD5
61a4cfad52834c537ae1411a388e755c
-
SHA1
e6d3f757b47c458dcb12f739924e0bce1f4b0afd
-
SHA256
9b6a7db9202742073407252d5db59ded5b938f7c2e2383b00e87857f122be3bc
-
SHA512
96e136b44e83627f050b69e2f61ca4a1444028337d14d8c1897263c34d268fd225f32badba5e8ca9318a77d6bb073550ad2124b0c81697d82e53323c01e84da8
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-