General
-
Target
0x00080000000139f4-168.dat
-
Size
172KB
-
Sample
230610-dz8qxseb39
-
MD5
541d9aee4999278911bf1508206b5ef0
-
SHA1
2121ef58ae58a5a3781b9f81153bf3af2fb92d5e
-
SHA256
631504a1bfbe78063c3715ed10e5759368427fd8d94b25eb6ca5a1df66a5ed7b
-
SHA512
70ab1a4d0e8ed7b44aa1191ec5e9ee3096a3e290dac7b106b176ac042c405e2b5fe51759d8b851216a35d87b00d07ca706e55de1585ccaa44c041b05375889ea
-
SSDEEP
3072:crbYm66HKzLSFYuxN4eCeWC/qUq8e8hh:ObYn/SelW/qUq
Behavioral task
behavioral1
Sample
0x00080000000139f4-168.exe
Resource
win7-20230220-en
Malware Config
Extracted
redline
dast
83.97.73.129:19068
-
auth_value
17d71bf1a3f93284f5848e00b0dd8222
Targets
-
-
Target
0x00080000000139f4-168.dat
-
Size
172KB
-
MD5
541d9aee4999278911bf1508206b5ef0
-
SHA1
2121ef58ae58a5a3781b9f81153bf3af2fb92d5e
-
SHA256
631504a1bfbe78063c3715ed10e5759368427fd8d94b25eb6ca5a1df66a5ed7b
-
SHA512
70ab1a4d0e8ed7b44aa1191ec5e9ee3096a3e290dac7b106b176ac042c405e2b5fe51759d8b851216a35d87b00d07ca706e55de1585ccaa44c041b05375889ea
-
SSDEEP
3072:crbYm66HKzLSFYuxN4eCeWC/qUq8e8hh:ObYn/SelW/qUq
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-