General
- Target 2846a8343dad66545eaeff4139747dd7.exe
- Size 89KB
- Sample220911-h94beabca4
- SHA256 d3d2ddfa17b273b9f85d14a56e9a7c4ad887e6722feba70fc4fc02ba89afa233
- MD5 2846a8343dad66545eaeff4139747dd7
- SHA1 0d3c371a46065235c92fbf42280bca9339541cca
- SHA512 47a6f77d7ace47eace2c9c6d8843135a61546de0b3849241c64f8d43226d1c62cb0bff8afde37927b72110944cd4b4424fd8449f58b17e84e1a4565a10c853e7
- SSDEEP 1536:dgLJw1AzWKhhb3Me5oaDYKf9qLVE0StZIbgw2Dbr+4BP2ZDNwEYdcu2BGFZ:6LJrb3M1mYKFGaZIb+vvP2ZDNwEYdF2k
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2846a8343dad66545eaeff4139747dd7.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2846a8343dad66545eaeff4139747dd7.exe
Resource
win10v2004-20220812-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
C2
-
45.8.23.11:5004
Attributes
-
auth_value
99b70df8cf3e1b75b71df8ec8115dc6e
Targets
-
- Target 2846a8343dad66545eaeff4139747dd7.exe
- Size 89KB
- SHA256 d3d2ddfa17b273b9f85d14a56e9a7c4ad887e6722feba70fc4fc02ba89afa233
- MD5 2846a8343dad66545eaeff4139747dd7
- SHA1 0d3c371a46065235c92fbf42280bca9339541cca
- SHA512 47a6f77d7ace47eace2c9c6d8843135a61546de0b3849241c64f8d43226d1c62cb0bff8afde37927b72110944cd4b4424fd8449f58b17e84e1a4565a10c853e7
- SSDEEP 1536:dgLJw1AzWKhhb3Me5oaDYKf9qLVE0StZIbgw2Dbr+4BP2ZDNwEYdcu2BGFZ:6LJrb3M1mYKFGaZIb+vvP2ZDNwEYdF2k
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.