General
- Target file.exe
- Size 358KB
- Sample221021-vxkpragca3
- SHA256 39df945a201a8891a98e8da9eca61390aea99e913a05451a1c98a5a934fa3346
- MD5 f3427e5f016cafc0fb3e719937c2ed1b
- SHA1 7dcdb5b1668ca62a98f28295b90525091bdd3707
- SHA512 919ba681756a69c3df13fc03a79fcbc6ac9f9603b203aed4993cc2c959f6a1ba7e63ff3b11c13500da33059bc1fa4d19f3a42a60457c602d8889be3b4b96aa73
- SSDEEP 6144:6UiLqKbQ/SFPPtbTX0+o1xqSNA19GCEnDAkAIop/Qu:6UimK0/YP5T/SNA1SD9S
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
C2
-
91.212.166.11:47242
Attributes
-
auth_value
d83284ddfbc129cdc7e539b09f717dbb
Targets
-
- Target file.exe
- Size 358KB
- SHA256 39df945a201a8891a98e8da9eca61390aea99e913a05451a1c98a5a934fa3346
- MD5 f3427e5f016cafc0fb3e719937c2ed1b
- SHA1 7dcdb5b1668ca62a98f28295b90525091bdd3707
- SHA512 919ba681756a69c3df13fc03a79fcbc6ac9f9603b203aed4993cc2c959f6a1ba7e63ff3b11c13500da33059bc1fa4d19f3a42a60457c602d8889be3b4b96aa73
- SSDEEP 6144:6UiLqKbQ/SFPPtbTX0+o1xqSNA19GCEnDAkAIop/Qu:6UimK0/YP5T/SNA1SD9S
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.