General
-
Target
file.exe
-
Size
346KB
-
Sample
221115-qny4kahh7s
-
MD5
192e0b50f53b12142bbfcaa193beffc9
-
SHA1
836e99b9d192fe8ac41e5c9a0bc467394167494a
-
SHA256
f036d8aba7a8636b99de447a964d3d74251019e71e5a8d2ef7ef5f0df462c450
-
SHA512
4f081efd689efb33ea22a269722a7bbe261482516b5d8adab1868ecfbfb3009b524e5bf0db8866743c1d8e1af27b4616257545ec9e05c591e8ef31f9435b1c01
-
SSDEEP
6144:+Ouh0xBc2H/9uC4vlwVNEpewEolVnEoYf49WVI:+OuizwCEp1VnjO4wI
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
Malware Config
Extracted
redline
neruz
193.106.191.27:47242
-
auth_value
0169a8759f3c9be473f782b96a6ff704
Targets
-
-
Target
file.exe
-
Size
346KB
-
MD5
192e0b50f53b12142bbfcaa193beffc9
-
SHA1
836e99b9d192fe8ac41e5c9a0bc467394167494a
-
SHA256
f036d8aba7a8636b99de447a964d3d74251019e71e5a8d2ef7ef5f0df462c450
-
SHA512
4f081efd689efb33ea22a269722a7bbe261482516b5d8adab1868ecfbfb3009b524e5bf0db8866743c1d8e1af27b4616257545ec9e05c591e8ef31f9435b1c01
-
SSDEEP
6144:+Ouh0xBc2H/9uC4vlwVNEpewEolVnEoYf49WVI:+OuizwCEp1VnjO4wI
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-