General
-
Target
bedfffb784db4b18bf373195f4443f3fc10bf9f2f1eb5f2502dcc83a56919a48
-
Size
370KB
-
Sample
220514-sraw9acghl
-
MD5
e704c85e7f1855b74aa4ac8137024c46
-
SHA1
42ed6e4b27fc828c7781b0b3fda2b358d708b30c
-
SHA256
bedfffb784db4b18bf373195f4443f3fc10bf9f2f1eb5f2502dcc83a56919a48
-
SHA512
05a6de8c8c3091238f390612a6b5844bb366aad7af0a4966b0a1cff274c64c8396c40ff9b40dcc0c590b28a6707f2e29a1bcf80ddff0dcd21d6373eadc6a236c
Static task
static1
Behavioral task
behavioral1
Sample
bedfffb784db4b18bf373195f4443f3fc10bf9f2f1eb5f2502dcc83a56919a48.exe
Resource
win10-20220414-en
Malware Config
Extracted
redline
swttestmet
185.215.113.75:4531
-
auth_value
adc5dc30debab8d39a706f26a199fa7e
Targets
-
-
Target
bedfffb784db4b18bf373195f4443f3fc10bf9f2f1eb5f2502dcc83a56919a48
-
Size
370KB
-
MD5
e704c85e7f1855b74aa4ac8137024c46
-
SHA1
42ed6e4b27fc828c7781b0b3fda2b358d708b30c
-
SHA256
bedfffb784db4b18bf373195f4443f3fc10bf9f2f1eb5f2502dcc83a56919a48
-
SHA512
05a6de8c8c3091238f390612a6b5844bb366aad7af0a4966b0a1cff274c64c8396c40ff9b40dcc0c590b28a6707f2e29a1bcf80ddff0dcd21d6373eadc6a236c
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-