General
-
Target
e01e4ebdceade8f7f9e29a3c8bceb7a9
-
Size
334KB
-
Sample
220529-zv1emsabc7
-
MD5
e01e4ebdceade8f7f9e29a3c8bceb7a9
-
SHA1
f531072ea44f2ddbff5670b9c47030a235aaa97b
-
SHA256
87a643f05a4a942da305e22222193770bee9ecee4f7f0442408445336bf1c8ef
-
SHA512
4f4d3b40c3efe5eebd5c472f15df0ec3f340b132b22f982085d5c617071f3548871f349268ba7c7c9584c37456aa54c8104ecc8c9d4aa45c7f535f64b6815170
Static task
static1
Behavioral task
behavioral1
Sample
e01e4ebdceade8f7f9e29a3c8bceb7a9.exe
Resource
win7-20220414-en
Malware Config
Extracted
redline
top
185.215.113.75:81
-
auth_value
ff6259bc2baf33b54b454aad484fb0ee
Targets
-
-
Target
e01e4ebdceade8f7f9e29a3c8bceb7a9
-
Size
334KB
-
MD5
e01e4ebdceade8f7f9e29a3c8bceb7a9
-
SHA1
f531072ea44f2ddbff5670b9c47030a235aaa97b
-
SHA256
87a643f05a4a942da305e22222193770bee9ecee4f7f0442408445336bf1c8ef
-
SHA512
4f4d3b40c3efe5eebd5c472f15df0ec3f340b132b22f982085d5c617071f3548871f349268ba7c7c9584c37456aa54c8104ecc8c9d4aa45c7f535f64b6815170
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-