General
-
Target
file
-
Size
405KB
-
Sample
221106-kbr7labge5
-
MD5
992cea08297eb2a23aee8b91b26c3e57
-
SHA1
79deb36f1ec427e97bc806b4ebe5ab6ba01e7fc3
-
SHA256
697d0dccfa14d70130bcba10333d12ab8eaf0994483e41603c43868055c093a6
-
SHA512
9fe2210430bcdea7e77d7dcf432e230c78bcf79a3b81dc5843a70c0075aa20c46c2e520247a3db256b0c152889ef5f8069fc29f2affefd763beeb421b1e59303
-
SSDEEP
6144:7ivftanAeUrILQa7Box+oMvM3JScGgU5udVGGLk+MuS:7iHtOUszusPuJScGgTiGA+M
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
Malware Config
Extracted
redline
suk
193.106.191.25:47242
-
auth_value
9762d5bcad64c7855837e80c232c7e77
Targets
-
-
Target
file
-
Size
405KB
-
MD5
992cea08297eb2a23aee8b91b26c3e57
-
SHA1
79deb36f1ec427e97bc806b4ebe5ab6ba01e7fc3
-
SHA256
697d0dccfa14d70130bcba10333d12ab8eaf0994483e41603c43868055c093a6
-
SHA512
9fe2210430bcdea7e77d7dcf432e230c78bcf79a3b81dc5843a70c0075aa20c46c2e520247a3db256b0c152889ef5f8069fc29f2affefd763beeb421b1e59303
-
SSDEEP
6144:7ivftanAeUrILQa7Box+oMvM3JScGgU5udVGGLk+MuS:7iHtOUszusPuJScGgTiGA+M
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-