General
-
Target
0x0009000000012310-996.dat
-
Size
175KB
-
Sample
230302-weew8adf6y
-
MD5
4ba68cd6f6a1c096c81c861b44347393
-
SHA1
bb6dad9e74541daa70b1195592ced36f908ca6b9
-
SHA256
47ac473214ceb693dfb4ffe6bec801b3e35b43eaa2aa1455c3f0b56720336a8a
-
SHA512
cc160d1be038c2132ce8744cdec421f0b1aae96d274180d8d5bf1f795820dfad126033e6972dd89744d424b272a08b35e22777d10a6378e459922e083d15e65a
-
SSDEEP
3072:yxqZWDfnaxIF63WUX+BJe5bF+h3HxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOh:gqZcmWkUM+h
Behavioral task
behavioral1
Sample
0x0009000000012310-996.exe
Resource
win7-20230220-en
Malware Config
Extracted
redline
fomich
melevv.eu:4162
-
auth_value
b018e52ac946001794d8b8c23e901859
Targets
-
-
Target
0x0009000000012310-996.dat
-
Size
175KB
-
MD5
4ba68cd6f6a1c096c81c861b44347393
-
SHA1
bb6dad9e74541daa70b1195592ced36f908ca6b9
-
SHA256
47ac473214ceb693dfb4ffe6bec801b3e35b43eaa2aa1455c3f0b56720336a8a
-
SHA512
cc160d1be038c2132ce8744cdec421f0b1aae96d274180d8d5bf1f795820dfad126033e6972dd89744d424b272a08b35e22777d10a6378e459922e083d15e65a
-
SSDEEP
3072:yxqZWDfnaxIF63WUX+BJe5bF+h3HxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOh:gqZcmWkUM+h
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-