General
- Target file.exe
- Size 359KB
- Sample221021-2tykrshed4
- SHA256 2fd4e12ca05b5c792920ebfc3d54526ff279f70a64408c536ec0299fe1025613
- MD5 9637c7c2db3e7871cf9632768cbb909c
- SHA1 9fe6ca71c964e35fc238d198f34fc31714d78ef6
- SHA512 12694d4174c077992be7410ae9f142d17e0254511a3aaf18243f8e357c873de33c7f11c1a7e36bb801aa80a65f61f5e610b2c7416f547bd01b5bcb4aa43ffc4a
- SSDEEP 6144:k0XLgCe0YB9JjK3AJVMy1qy3vPzaKkIUDysGVnvQkXcCmBWAcleS:k0X8CkBa6T1vaKdiysGVnvlr
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
C2
-
91.212.166.11:47242
Attributes
-
auth_value
d83284ddfbc129cdc7e539b09f717dbb
Targets
-
- Target file.exe
- Size 359KB
- SHA256 2fd4e12ca05b5c792920ebfc3d54526ff279f70a64408c536ec0299fe1025613
- MD5 9637c7c2db3e7871cf9632768cbb909c
- SHA1 9fe6ca71c964e35fc238d198f34fc31714d78ef6
- SHA512 12694d4174c077992be7410ae9f142d17e0254511a3aaf18243f8e357c873de33c7f11c1a7e36bb801aa80a65f61f5e610b2c7416f547bd01b5bcb4aa43ffc4a
- SSDEEP 6144:k0XLgCe0YB9JjK3AJVMy1qy3vPzaKkIUDysGVnvQkXcCmBWAcleS:k0X8CkBa6T1vaKdiysGVnvlr
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.