General
-
Target
8a54239a1198381d7ee58ec079daa9bf.exe
-
Size
347KB
-
Sample
220515-ry481aehg7
-
MD5
8a54239a1198381d7ee58ec079daa9bf
-
SHA1
2186416a26161220603ab0f6f04e7905b9e49af1
-
SHA256
23d8c293f8e11955f68c28f40c795e59ab7e7d0c5b5e5c19aed8309c2596e5a9
-
SHA512
f9cbaaba73858b9be37e631ab156cd573e0ea414c121546ca5788d9086af32964a137c4844fd64ace5939b319586e084086b9a361d69cfbe431fd980a15cc493
Static task
static1
Behavioral task
behavioral1
Sample
8a54239a1198381d7ee58ec079daa9bf.exe
Resource
win7-20220414-en
Malware Config
Extracted
redline
top
iclarinyerac.xyz:80
manellylarii.xyz:80
-
auth_value
b66a08c69f913be894bbfce00805fab1
Targets
-
-
Target
8a54239a1198381d7ee58ec079daa9bf.exe
-
Size
347KB
-
MD5
8a54239a1198381d7ee58ec079daa9bf
-
SHA1
2186416a26161220603ab0f6f04e7905b9e49af1
-
SHA256
23d8c293f8e11955f68c28f40c795e59ab7e7d0c5b5e5c19aed8309c2596e5a9
-
SHA512
f9cbaaba73858b9be37e631ab156cd573e0ea414c121546ca5788d9086af32964a137c4844fd64ace5939b319586e084086b9a361d69cfbe431fd980a15cc493
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-