General
- Target Doge860.exe
- Size 307KB
- Sample230522-hccgeshc71
- SHA256 456f100fa1e38ed580c92e324c9dde6fd11a159dcd3efe4de8d54868de4ce83c
- MD5 3d3d13f1b2c6a21e6a46e771219a7000
- SHA1 0562a772c2588075ebde3a209851c0475d620d69
- SHA512 c13e113b87d7492f05cd3115f56230311940a8020bc22dfbbe5b33d184bc58f8265c66910c23e4a77c7efb16a34f2604ad812e79fa1a4550c3186d867df6b534
- SSDEEP 6144:yJPZROllAfDq3TqozelOdWMNgXN3167hljbVHOBHEB45IN5f:yZZRO4fSuooOdWMNCNlk1HaHdy
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Doge860.exe
Resource
win7-20230220-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target Doge860.exe
- Size 307KB
- SHA256 456f100fa1e38ed580c92e324c9dde6fd11a159dcd3efe4de8d54868de4ce83c
- MD5 3d3d13f1b2c6a21e6a46e771219a7000
- SHA1 0562a772c2588075ebde3a209851c0475d620d69
- SHA512 c13e113b87d7492f05cd3115f56230311940a8020bc22dfbbe5b33d184bc58f8265c66910c23e4a77c7efb16a34f2604ad812e79fa1a4550c3186d867df6b534
- SSDEEP 6144:yJPZROllAfDq3TqozelOdWMNgXN3167hljbVHOBHEB45IN5f:yZZRO4fSuooOdWMNCNlk1HaHdy
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.