General
-
Target
2846a8343dad66545eaeff4139747dd7.exe
-
Size
89KB
-
Sample
220911-h94beabca4
-
MD5
2846a8343dad66545eaeff4139747dd7
-
SHA1
0d3c371a46065235c92fbf42280bca9339541cca
-
SHA256
d3d2ddfa17b273b9f85d14a56e9a7c4ad887e6722feba70fc4fc02ba89afa233
-
SHA512
47a6f77d7ace47eace2c9c6d8843135a61546de0b3849241c64f8d43226d1c62cb0bff8afde37927b72110944cd4b4424fd8449f58b17e84e1a4565a10c853e7
-
SSDEEP
1536:dgLJw1AzWKhhb3Me5oaDYKf9qLVE0StZIbgw2Dbr+4BP2ZDNwEYdcu2BGFZ:6LJrb3M1mYKFGaZIb+vvP2ZDNwEYdF2k
Behavioral task
behavioral1
Sample
2846a8343dad66545eaeff4139747dd7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2846a8343dad66545eaeff4139747dd7.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
redline
45.8.23.11:5004
-
auth_value
99b70df8cf3e1b75b71df8ec8115dc6e
Targets
-
-
Target
2846a8343dad66545eaeff4139747dd7.exe
-
Size
89KB
-
MD5
2846a8343dad66545eaeff4139747dd7
-
SHA1
0d3c371a46065235c92fbf42280bca9339541cca
-
SHA256
d3d2ddfa17b273b9f85d14a56e9a7c4ad887e6722feba70fc4fc02ba89afa233
-
SHA512
47a6f77d7ace47eace2c9c6d8843135a61546de0b3849241c64f8d43226d1c62cb0bff8afde37927b72110944cd4b4424fd8449f58b17e84e1a4565a10c853e7
-
SSDEEP
1536:dgLJw1AzWKhhb3Me5oaDYKf9qLVE0StZIbgw2Dbr+4BP2ZDNwEYdcu2BGFZ:6LJrb3M1mYKFGaZIb+vvP2ZDNwEYdF2k
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-