General
-
Target
732bbd377444734d41284b2486bd1d5f.exe
-
Size
401KB
-
Sample
211220-h1hy4shha2
-
MD5
732bbd377444734d41284b2486bd1d5f
-
SHA1
4b6cda75bb12f0df22c37895722fea4d1a556fe0
-
SHA256
2ddafc38ccd550c84fd7597adc2cc18799862a97e4d3b7e8ba44b510c5db415a
-
SHA512
f72a7e2af847929d2011221d4198a471cca146db7cf7c894715bb93264461bd5888f810aad15ddcd369344231998562014e69c71b975523f57d15755b7bcc4e4
Static task
static1
Behavioral task
behavioral1
Sample
732bbd377444734d41284b2486bd1d5f.exe
Resource
win7-en-20211208
Malware Config
Extracted
redline
170
45.9.20.240:46257
Targets
-
-
Target
732bbd377444734d41284b2486bd1d5f.exe
-
Size
401KB
-
MD5
732bbd377444734d41284b2486bd1d5f
-
SHA1
4b6cda75bb12f0df22c37895722fea4d1a556fe0
-
SHA256
2ddafc38ccd550c84fd7597adc2cc18799862a97e4d3b7e8ba44b510c5db415a
-
SHA512
f72a7e2af847929d2011221d4198a471cca146db7cf7c894715bb93264461bd5888f810aad15ddcd369344231998562014e69c71b975523f57d15755b7bcc4e4
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-