General
-
Target
15673391590007385026.exe
-
Size
406KB
-
Sample
211024-dmcgyschb9
-
MD5
929b427367dfd31b05c968c6a6e41090
-
SHA1
79362ff20444cf8447e334e8f83baac2db0eb6d3
-
SHA256
70d6bacc977fedfdd08ebe648372c5ad353c5ba52c0c2ef40e76d66778ca40e8
-
SHA512
25c2ff3f9187954418724f4b4f60adaddc22955625aa28b5d89955bee301adea3f941c0e25ba6f0e4947c8143ba31627664e01b524f499bcf836c8b15b07ae89
Static task
static1
Behavioral task
behavioral1
Sample
15673391590007385026.exe
Resource
win7-en-20210920
Behavioral task
behavioral2
Sample
15673391590007385026.exe
Resource
win10-en-20211014
Malware Config
Targets
-
-
Target
15673391590007385026.exe
-
Size
406KB
-
MD5
929b427367dfd31b05c968c6a6e41090
-
SHA1
79362ff20444cf8447e334e8f83baac2db0eb6d3
-
SHA256
70d6bacc977fedfdd08ebe648372c5ad353c5ba52c0c2ef40e76d66778ca40e8
-
SHA512
25c2ff3f9187954418724f4b4f60adaddc22955625aa28b5d89955bee301adea3f941c0e25ba6f0e4947c8143ba31627664e01b524f499bcf836c8b15b07ae89
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-