General
- Target file.exe
- Size 359KB
- Sample221021-ysnsdsdeek
- SHA256 9b3c936ca4fe043d2de3842d446c5030d0053e8ac21c09b5ccf4a3eeda12b745
- MD5 018b96b162c26066f79d45175fc23613
- SHA1 1877d9dd50ad0e2a08a5398e76b352a6e01b0646
- SHA512 daddecbd203740b0da26db13a13023c2162443725582d71b3c1b287710dcacba7a72672267b2cfafa379dfa30743f9db97b5a7759379e258c6c3975811118781
- SSDEEP 6144:clULMsvAMFLhVKFNBMZCww2F1/Ip11dPjZ2QmdX+BNzpToLv9S:clUAsoMFLh8FNBMZAA/IvPjZuczk
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
C2
-
91.212.166.11:47242
Attributes
-
auth_value
d83284ddfbc129cdc7e539b09f717dbb
Targets
-
- Target file.exe
- Size 359KB
- SHA256 9b3c936ca4fe043d2de3842d446c5030d0053e8ac21c09b5ccf4a3eeda12b745
- MD5 018b96b162c26066f79d45175fc23613
- SHA1 1877d9dd50ad0e2a08a5398e76b352a6e01b0646
- SHA512 daddecbd203740b0da26db13a13023c2162443725582d71b3c1b287710dcacba7a72672267b2cfafa379dfa30743f9db97b5a7759379e258c6c3975811118781
- SSDEEP 6144:clULMsvAMFLhVKFNBMZCww2F1/Ip11dPjZ2QmdX+BNzpToLv9S:clUAsoMFLh8FNBMZAA/IvPjZuczk
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.