General
-
Target
0x000800000001272d-78.dat
-
Size
172KB
-
Sample
230609-vgq7lade8s
-
MD5
d19c9e02bd75ee8bda7ce44ee0bb021a
-
SHA1
98f544edd796c5d80e0a4fa6a13f8fea04773275
-
SHA256
1ee4c33d84dbb7dffa7e8881a3c460fb1d84c1d6eb08891a5eccf321436eb1c2
-
SHA512
c72e57e491ee565e01f4b8a297ad191fd2de1078e2d3ff70ef65f929882f97dd1fbfab2e938beb1796ce347afd2a551267403838a4910908f3ccf8e7de2554cf
-
SSDEEP
3072:QUYvpRfFyNgq8oMGl9ixNcO3qdLbkSh8e8hb:kVoVrLbkSh
Behavioral task
behavioral1
Sample
0x000800000001272d-78.exe
Resource
win7-20230220-en
Malware Config
Extracted
redline
duha
83.97.73.129:19068
-
auth_value
aafe99874c3b8854069470882e00246c
Targets
-
-
Target
0x000800000001272d-78.dat
-
Size
172KB
-
MD5
d19c9e02bd75ee8bda7ce44ee0bb021a
-
SHA1
98f544edd796c5d80e0a4fa6a13f8fea04773275
-
SHA256
1ee4c33d84dbb7dffa7e8881a3c460fb1d84c1d6eb08891a5eccf321436eb1c2
-
SHA512
c72e57e491ee565e01f4b8a297ad191fd2de1078e2d3ff70ef65f929882f97dd1fbfab2e938beb1796ce347afd2a551267403838a4910908f3ccf8e7de2554cf
-
SSDEEP
3072:QUYvpRfFyNgq8oMGl9ixNcO3qdLbkSh8e8hb:kVoVrLbkSh
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-