General
-
Target
0x00080000000122f8-97.dat
-
Size
168KB
-
Sample
230603-jhdgcaga32
-
MD5
1703e80593481e180abe8193cb9816d9
-
SHA1
eb13447e9557651ac8268d9d03895311b07e82d4
-
SHA256
a5ab8f83345a3464ab3c1947bd3c4fc4333310edf30be7e336f0229396630a94
-
SHA512
17558935b4323ee09e5be7af70edf8729bd9c8f962d42c6c468fe395c7db89c66bbe07acc6b3dd06f48852bd2f37b49869ca7534b64766a77e1937b85bbf1025
-
SSDEEP
3072:NPAVVKve8WCXYFlqVsg4/ywuHx8nB8e8hE:ZAVV+rX0DZFuHx8nB
Behavioral task
behavioral1
Sample
0x00080000000122f8-97.exe
Resource
win7-20230220-en
Malware Config
Extracted
redline
lupa
83.97.73.126:19046
-
auth_value
6a764aa41830c77712442516d143bc9c
Targets
-
-
Target
0x00080000000122f8-97.dat
-
Size
168KB
-
MD5
1703e80593481e180abe8193cb9816d9
-
SHA1
eb13447e9557651ac8268d9d03895311b07e82d4
-
SHA256
a5ab8f83345a3464ab3c1947bd3c4fc4333310edf30be7e336f0229396630a94
-
SHA512
17558935b4323ee09e5be7af70edf8729bd9c8f962d42c6c468fe395c7db89c66bbe07acc6b3dd06f48852bd2f37b49869ca7534b64766a77e1937b85bbf1025
-
SSDEEP
3072:NPAVVKve8WCXYFlqVsg4/ywuHx8nB8e8hE:ZAVV+rX0DZFuHx8nB
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-