General
-
Target
80d73f1bad2556979c5c9759800ed243
-
Size
413KB
-
Sample
220623-rkj1xaddcq
-
MD5
80d73f1bad2556979c5c9759800ed243
-
SHA1
31089ba600b03d8592c99e6bdbd15585abdd8e1c
-
SHA256
5d1e2200925af86836f79400e3cb449428ee40d9a053d01d4d88edccfcc76c68
-
SHA512
e2f3c8c5043bf937ed4e15a69df4e153c1dd5bd874a8c7e072c85232ef09435a3db14f408a15b77b034109dcd863d06c86650a5f43b82341f0875e2557d4e38b
Static task
static1
Behavioral task
behavioral1
Sample
80d73f1bad2556979c5c9759800ed243.exe
Resource
win7-20220414-en
Malware Config
Extracted
redline
RUZKI
193.106.191.246:23196
-
auth_value
121027c094f768a0a0e9b562f6417952
Targets
-
-
Target
80d73f1bad2556979c5c9759800ed243
-
Size
413KB
-
MD5
80d73f1bad2556979c5c9759800ed243
-
SHA1
31089ba600b03d8592c99e6bdbd15585abdd8e1c
-
SHA256
5d1e2200925af86836f79400e3cb449428ee40d9a053d01d4d88edccfcc76c68
-
SHA512
e2f3c8c5043bf937ed4e15a69df4e153c1dd5bd874a8c7e072c85232ef09435a3db14f408a15b77b034109dcd863d06c86650a5f43b82341f0875e2557d4e38b
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-