General
-
Target
file.exe
-
Size
346KB
-
Sample
221115-qaxzcaea43
-
MD5
345f219095bb2ce4138e9773cded3248
-
SHA1
3729b07396207fb6566254f9231026288ae885ca
-
SHA256
e1f6d6e20df0af14982c952f6faa2117cd825dd0eb5ec5f4e804cf997cabfd5d
-
SHA512
97a0ef0162cbb278f3c2bbc73991e1009a0d8771fef885a5a63dd75722aa7617c60f655a6cd050c49b1f6035cf11ed553b8cad363f154b9e10c67b9afb1fa19b
-
SSDEEP
6144:QNoEFwUsET7ufRbmHBV48VsC5zQHFcjru2AfUBdVDsCe:KoEFGmuJa75ZDsflL
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
Malware Config
Extracted
redline
neruz
193.106.191.27:47242
-
auth_value
0169a8759f3c9be473f782b96a6ff704
Targets
-
-
Target
file.exe
-
Size
346KB
-
MD5
345f219095bb2ce4138e9773cded3248
-
SHA1
3729b07396207fb6566254f9231026288ae885ca
-
SHA256
e1f6d6e20df0af14982c952f6faa2117cd825dd0eb5ec5f4e804cf997cabfd5d
-
SHA512
97a0ef0162cbb278f3c2bbc73991e1009a0d8771fef885a5a63dd75722aa7617c60f655a6cd050c49b1f6035cf11ed553b8cad363f154b9e10c67b9afb1fa19b
-
SSDEEP
6144:QNoEFwUsET7ufRbmHBV48VsC5zQHFcjru2AfUBdVDsCe:KoEFGmuJa75ZDsflL
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-