General
-
Target
b824349984caaa7351d0c62a0_JC.exe
-
Size
441KB
-
Sample
230728-v7qzhsfc61
-
MD5
b268ac227f61080c783c56005fa2ff83
-
SHA1
8b4e46ce1b66655fd893e87fb12fc4bb89f46578
-
SHA256
b824349984caaa7351d0c62a0b04e0ff3412834c24e7f9f29e9c1459c525ccb1
-
SHA512
4dcf500bcf1423e40d9dbe2c5ed55518f7b76521941bb05bff4f47158bb9d8c35ed2d423a0c96e74a798d342eca0a7c170eed42e032b6e867aac0484902ef9f2
-
SSDEEP
6144:2QYU8LE9mXbBb/Adg1RZceDBfYHbbk21Erzpjv+HT:AU8IYoASbWpjmz
Static task
static1
Behavioral task
behavioral1
Sample
b824349984caaa7351d0c62a0_JC.exe
Resource
win7-20230712-en
Malware Config
Extracted
redline
@Germany
194.26.135.162:2920
-
auth_value
9d15d78194367a949e54a07d6ce02c62
Targets
-
-
Target
b824349984caaa7351d0c62a0_JC.exe
-
Size
441KB
-
MD5
b268ac227f61080c783c56005fa2ff83
-
SHA1
8b4e46ce1b66655fd893e87fb12fc4bb89f46578
-
SHA256
b824349984caaa7351d0c62a0b04e0ff3412834c24e7f9f29e9c1459c525ccb1
-
SHA512
4dcf500bcf1423e40d9dbe2c5ed55518f7b76521941bb05bff4f47158bb9d8c35ed2d423a0c96e74a798d342eca0a7c170eed42e032b6e867aac0484902ef9f2
-
SSDEEP
6144:2QYU8LE9mXbBb/Adg1RZceDBfYHbbk21Erzpjv+HT:AU8IYoASbWpjmz
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-