General
-
Target
3b5744d7cca3c475878a7ffa9082ba32cd113908a0562c752d475fef2ac364a3
-
Size
415KB
-
Sample
220527-pz8xgaagf4
-
MD5
a59076716d241ef5409007b2f97a8d06
-
SHA1
cb1da4da6aafee8edc64b1f6d74a4bd6e8315aa3
-
SHA256
3b5744d7cca3c475878a7ffa9082ba32cd113908a0562c752d475fef2ac364a3
-
SHA512
71d9cd333b2adf546ab085a80b26623457300069e1977a1967ab85840afd6bcd389c59dba8825487a7c646a7d4c2b3464e814cad93f99e5641a897e28716cb6b
Static task
static1
Behavioral task
behavioral1
Sample
3b5744d7cca3c475878a7ffa9082ba32cd113908a0562c752d475fef2ac364a3.exe
Resource
win10-20220414-en
Malware Config
Extracted
redline
RuzkiUNIKALNO
193.233.48.58:38989
-
auth_value
c504b04cfbdd4bf85ce6195bcb37fba6
Targets
-
-
Target
3b5744d7cca3c475878a7ffa9082ba32cd113908a0562c752d475fef2ac364a3
-
Size
415KB
-
MD5
a59076716d241ef5409007b2f97a8d06
-
SHA1
cb1da4da6aafee8edc64b1f6d74a4bd6e8315aa3
-
SHA256
3b5744d7cca3c475878a7ffa9082ba32cd113908a0562c752d475fef2ac364a3
-
SHA512
71d9cd333b2adf546ab085a80b26623457300069e1977a1967ab85840afd6bcd389c59dba8825487a7c646a7d4c2b3464e814cad93f99e5641a897e28716cb6b
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-