General
-
Target
0826739c586a82c816d32cb9034dccb6.exe
-
Size
401KB
-
Sample
211219-ehxsrsfgf9
-
MD5
0826739c586a82c816d32cb9034dccb6
-
SHA1
982fee4a04ed018d3d745304139450b58dfd55b1
-
SHA256
dffc96e5487f30252d16fa0d9ad5cb3e05c1298efe91f6b90deaf1a33918a6cd
-
SHA512
22151440665e0d4f4f1d061b0b68f9a87649ca5c52aa10e8cf6b050234958bbb36511a3d4dd5c7622e73a85f8495bf78992d6d358136e6ec3f9fe41363ff0496
Static task
static1
Behavioral task
behavioral1
Sample
0826739c586a82c816d32cb9034dccb6.exe
Resource
win7-en-20211208
Malware Config
Extracted
redline
170
45.9.20.240:46257
Targets
-
-
Target
0826739c586a82c816d32cb9034dccb6.exe
-
Size
401KB
-
MD5
0826739c586a82c816d32cb9034dccb6
-
SHA1
982fee4a04ed018d3d745304139450b58dfd55b1
-
SHA256
dffc96e5487f30252d16fa0d9ad5cb3e05c1298efe91f6b90deaf1a33918a6cd
-
SHA512
22151440665e0d4f4f1d061b0b68f9a87649ca5c52aa10e8cf6b050234958bbb36511a3d4dd5c7622e73a85f8495bf78992d6d358136e6ec3f9fe41363ff0496
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-