General
-
Target
59bd2fca527f56362d7b7ace29258e5b.exe
-
Size
405KB
-
Sample
211022-zdkmvscba4
-
MD5
59bd2fca527f56362d7b7ace29258e5b
-
SHA1
f0a41b9cc62d571b4503922af174e8468d2a3e5b
-
SHA256
858d2384fe0e2ed91c2e2400e4f58435d59989a0e209747004a0e63f898ba483
-
SHA512
cbde04dfffa4f9f05edb135d2263e5d515a1ab9978517a82c083d0de09508f334f618fe2fd4907c178ff815c5d8ca91fc455e8b69753e8cbf84cd8e94afb33c9
Static task
static1
Behavioral task
behavioral1
Sample
59bd2fca527f56362d7b7ace29258e5b.exe
Resource
win7-en-20210920
Behavioral task
behavioral2
Sample
59bd2fca527f56362d7b7ace29258e5b.exe
Resource
win10-en-20211014
Malware Config
Targets
-
-
Target
59bd2fca527f56362d7b7ace29258e5b.exe
-
Size
405KB
-
MD5
59bd2fca527f56362d7b7ace29258e5b
-
SHA1
f0a41b9cc62d571b4503922af174e8468d2a3e5b
-
SHA256
858d2384fe0e2ed91c2e2400e4f58435d59989a0e209747004a0e63f898ba483
-
SHA512
cbde04dfffa4f9f05edb135d2263e5d515a1ab9978517a82c083d0de09508f334f618fe2fd4907c178ff815c5d8ca91fc455e8b69753e8cbf84cd8e94afb33c9
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-