General
-
Target
f0a8d8c69c9fe2352c6569f9973487aed35d6961799d4893c5327ce0876ae935
-
Size
106KB
-
Sample
211220-xfk1asbdh9
-
MD5
c9a9c9fafa944a688aa43d4e15d40690
-
SHA1
5c895ab3943dc195a69eb050b11490526e994b80
-
SHA256
f0a8d8c69c9fe2352c6569f9973487aed35d6961799d4893c5327ce0876ae935
-
SHA512
bec9fa8b81127fef4eb44959b6aeced1c092950394dc65919748d64dd099b2ccdf94c1a22b893fc59de6c484890c581f0a6c9931bf619088ce7951409acd2461
Malware Config
Extracted
redline
runpe
142.202.242.172:7667
Targets
-
-
Target
f0a8d8c69c9fe2352c6569f9973487aed35d6961799d4893c5327ce0876ae935
-
Size
106KB
-
MD5
c9a9c9fafa944a688aa43d4e15d40690
-
SHA1
5c895ab3943dc195a69eb050b11490526e994b80
-
SHA256
f0a8d8c69c9fe2352c6569f9973487aed35d6961799d4893c5327ce0876ae935
-
SHA512
bec9fa8b81127fef4eb44959b6aeced1c092950394dc65919748d64dd099b2ccdf94c1a22b893fc59de6c484890c581f0a6c9931bf619088ce7951409acd2461
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-