General
-
Target
28c31ac301aacdf4d099775efbed0932ea299ab42b070060b3ef5c3f09338256
-
Size
695KB
-
Sample
231003-mjvc2abg39
-
MD5
a9910121056a3c030edc86562000399f
-
SHA1
82688decc59fd41526632dbc62aa16a224e18bc6
-
SHA256
28c31ac301aacdf4d099775efbed0932ea299ab42b070060b3ef5c3f09338256
-
SHA512
59f8a6ebc424b32c133b15c48b0865660b3c1a3b8e10a2183f8da9ed960ccac193def7d7dd22bb755812df433b16fe57d1069a106d1de4354eccb21aca314365
-
SSDEEP
12288:Il+7jKb4Vv5fpIOiePwGIuYlu71oQC7s2LuF+F9DY2BIkHFcHEU2a1O:zVv5fbPwfkqLDYm
Static task
static1
Behavioral task
behavioral1
Sample
28c31ac301aacdf4d099775efbed0932ea299ab42b070060b3ef5c3f09338256.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
28c31ac301aacdf4d099775efbed0932ea299ab42b070060b3ef5c3f09338256.exe
Resource
win10v2004-20230915-en
Malware Config
Targets
-
-
Target
28c31ac301aacdf4d099775efbed0932ea299ab42b070060b3ef5c3f09338256
-
Size
695KB
-
MD5
a9910121056a3c030edc86562000399f
-
SHA1
82688decc59fd41526632dbc62aa16a224e18bc6
-
SHA256
28c31ac301aacdf4d099775efbed0932ea299ab42b070060b3ef5c3f09338256
-
SHA512
59f8a6ebc424b32c133b15c48b0865660b3c1a3b8e10a2183f8da9ed960ccac193def7d7dd22bb755812df433b16fe57d1069a106d1de4354eccb21aca314365
-
SSDEEP
12288:Il+7jKb4Vv5fpIOiePwGIuYlu71oQC7s2LuF+F9DY2BIkHFcHEU2a1O:zVv5fbPwfkqLDYm
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-