General
-
Target
0x000700000001af4e-133.dat
-
Size
168KB
-
Sample
230504-gt2bfaac32
-
MD5
6aa053f74780992ff7a917013a6802d3
-
SHA1
9690ac7e866106796f7f71b5dadc2b56f4686235
-
SHA256
755547e0150c2569542536671ccc22519d7450885233776bca24964a85cdba2a
-
SHA512
575272f66e9ec9cb6fe4c9d0efeb1de83d02cad42452d850a2584cc57af08b3f1384aa5fb5eeb163cfe504cb2da7f98dd1a17bd24b7cdcf14f68e9117d3c9080
-
SSDEEP
1536:Eq24CeDYZ5QqlVZRGWoysHrt3la3cOo+TGqV0buhoxW7/C6gX83wYk/8e8hK:EObYH2HaXEqVMVxI/C6gXh8e8hK
Behavioral task
behavioral1
Sample
0x000700000001af4e-133.exe
Resource
win7-20230220-en
Malware Config
Extracted
redline
daris
217.196.96.56:4138
-
auth_value
3491f24ae0250969cd45ce4b3fe77549
Targets
-
-
Target
0x000700000001af4e-133.dat
-
Size
168KB
-
MD5
6aa053f74780992ff7a917013a6802d3
-
SHA1
9690ac7e866106796f7f71b5dadc2b56f4686235
-
SHA256
755547e0150c2569542536671ccc22519d7450885233776bca24964a85cdba2a
-
SHA512
575272f66e9ec9cb6fe4c9d0efeb1de83d02cad42452d850a2584cc57af08b3f1384aa5fb5eeb163cfe504cb2da7f98dd1a17bd24b7cdcf14f68e9117d3c9080
-
SSDEEP
1536:Eq24CeDYZ5QqlVZRGWoysHrt3la3cOo+TGqV0buhoxW7/C6gX83wYk/8e8hK:EObYH2HaXEqVMVxI/C6gXh8e8hK
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-