General
-
Target
983e386ece70ed44b6d32d97fe4f119c.exe
-
Size
397KB
-
Sample
211219-e234wsggdj
-
MD5
983e386ece70ed44b6d32d97fe4f119c
-
SHA1
25d523520fb6ac457f879bcc09a1e6ac8be02c52
-
SHA256
1e92c2a7f4f03e38ada4d5cc9d64e5afdff110a294a9f1e15c165e0331f3f9ab
-
SHA512
858ac03439dabf8d6120da4f76587d3fa33d1d5d2f6763d0129b8aedd130ad0968946173ddc0da97a90b3d2843d51c7bb14aec2344a00d8a7e30edb150db13ca
Static task
static1
Behavioral task
behavioral1
Sample
983e386ece70ed44b6d32d97fe4f119c.exe
Resource
win7-en-20211208
Malware Config
Extracted
redline
170
45.9.20.240:46257
Targets
-
-
Target
983e386ece70ed44b6d32d97fe4f119c.exe
-
Size
397KB
-
MD5
983e386ece70ed44b6d32d97fe4f119c
-
SHA1
25d523520fb6ac457f879bcc09a1e6ac8be02c52
-
SHA256
1e92c2a7f4f03e38ada4d5cc9d64e5afdff110a294a9f1e15c165e0331f3f9ab
-
SHA512
858ac03439dabf8d6120da4f76587d3fa33d1d5d2f6763d0129b8aedd130ad0968946173ddc0da97a90b3d2843d51c7bb14aec2344a00d8a7e30edb150db13ca
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-