General
- Target file.exe
- Size 354KB
- Sample221022-lbwqfscaf2
- SHA256 8913c4b3be9afa554dc51de489cfba651edfda580c5740c859d482e81e7df3d4
- MD5 895057e107524697e9fc9e7445573111
- SHA1 0e5502eb20f7c8f738f18b38535223e85fe3c37d
- SHA512 991421f8099eca0e08fc0557c6d756614b3b2bb6c46f1e5662f0d970c9477a06eeb0e156299646dc39897501b5ba438ef06d888b5a61841c28956d3899c3eefd
- SSDEEP 6144:OtZLL95SiJeqXdJL2lN+P1SFKOhhn/Qd:OXLB56MTL0U1SgOhp
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
C2
-
91.212.166.11:47242
Attributes
-
auth_value
d83284ddfbc129cdc7e539b09f717dbb
Targets
-
- Target file.exe
- Size 354KB
- SHA256 8913c4b3be9afa554dc51de489cfba651edfda580c5740c859d482e81e7df3d4
- MD5 895057e107524697e9fc9e7445573111
- SHA1 0e5502eb20f7c8f738f18b38535223e85fe3c37d
- SHA512 991421f8099eca0e08fc0557c6d756614b3b2bb6c46f1e5662f0d970c9477a06eeb0e156299646dc39897501b5ba438ef06d888b5a61841c28956d3899c3eefd
- SSDEEP 6144:OtZLL95SiJeqXdJL2lN+P1SFKOhhn/Qd:OXLB56MTL0U1SgOhp
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.