General
-
Target
943982e396fc5eae02a2657518b8fcdd.exe
-
Size
383KB
-
Sample
220811-mv42lsecal
-
MD5
943982e396fc5eae02a2657518b8fcdd
-
SHA1
657570a377c42198065415321b4622c4f759a476
-
SHA256
0a9cc51b1472b46808789d715eb36e9944f3c1e304243f10e73f03064ee7fbae
-
SHA512
3ff3f67ba75eca88377aef5295fff50dc432cfd505fd4afaecfed17b19205bb8854b7f298fc1e72de7132561dc60d70aa00c59164647e709a6a5fd6e5c7ee8d7
Static task
static1
Behavioral task
behavioral1
Sample
943982e396fc5eae02a2657518b8fcdd.exe
Resource
win7-20220715-en
Malware Config
Extracted
redline
ruzki
193.106.191.165:39482
-
auth_value
71a0558c0eea274a5bd617ea85786884
Targets
-
-
Target
943982e396fc5eae02a2657518b8fcdd.exe
-
Size
383KB
-
MD5
943982e396fc5eae02a2657518b8fcdd
-
SHA1
657570a377c42198065415321b4622c4f759a476
-
SHA256
0a9cc51b1472b46808789d715eb36e9944f3c1e304243f10e73f03064ee7fbae
-
SHA512
3ff3f67ba75eca88377aef5295fff50dc432cfd505fd4afaecfed17b19205bb8854b7f298fc1e72de7132561dc60d70aa00c59164647e709a6a5fd6e5c7ee8d7
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-