General
-
Target
02544999.dat
-
Size
172KB
-
Sample
230606-s1fh4aed27
-
MD5
7c412cfbd52a7cdc085f22d008303140
-
SHA1
97b64b26e4ae34360f4642b823e1a2d66d3be7d7
-
SHA256
0adfdaf7ffac50f3e5bfebe95f1a33552447ca7d800080f767f9b3b8d1780135
-
SHA512
84f4b21f1df6cef5b39ca541af4a5615d8e9d6ef2749454a04fd65cdfd9b2179697417987cdc57584611405505fb54dd64a632f23108d0bb664b13ed67e6cb22
-
SSDEEP
3072:QBF8QOIKbe97H9rWRxNB2NjrOSHy+8e8hg:q8MVdaHMOSHy+
Behavioral task
behavioral1
Sample
02544999.exe
Resource
win7-20230220-en
Malware Config
Extracted
redline
maxi
83.97.73.126:19048
-
auth_value
6a3f22e5f4209b056a3fd330dc71956a
Targets
-
-
Target
02544999.dat
-
Size
172KB
-
MD5
7c412cfbd52a7cdc085f22d008303140
-
SHA1
97b64b26e4ae34360f4642b823e1a2d66d3be7d7
-
SHA256
0adfdaf7ffac50f3e5bfebe95f1a33552447ca7d800080f767f9b3b8d1780135
-
SHA512
84f4b21f1df6cef5b39ca541af4a5615d8e9d6ef2749454a04fd65cdfd9b2179697417987cdc57584611405505fb54dd64a632f23108d0bb664b13ed67e6cb22
-
SSDEEP
3072:QBF8QOIKbe97H9rWRxNB2NjrOSHy+8e8hg:q8MVdaHMOSHy+
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-