General
-
Target
66B4646D05C237615F220CD5530B776E424EF3482C08B.exe
-
Size
174KB
-
Sample
231026-swdhyaed99
-
MD5
f8822c5ad94d960211c2e263197a0ee8
-
SHA1
bf11061281f53044bf36b20ad8a89be7a31e1c6e
-
SHA256
66b4646d05c237615f220cd5530b776e424ef3482c08b58bbbaad413c79226bd
-
SHA512
c34d8f5eae9a35bb4e4a169bc9a3853f9a0efa1dbb5098da397aa8f3c792128cc5495e5b78d53af3500d48ca8772e324b1b61e5a507aa09a2e2a7b8a04a64c90
-
SSDEEP
3072:XEVe58FI0i24iXOXCN68SOE0m3m+MCmJc8e8hE:XEHFI0i24iDSOE0CMCma
Behavioral task
behavioral1
Sample
66B4646D05C237615F220CD5530B776E424EF3482C08B.exe
Resource
win7-20231020-en
Malware Config
Extracted
redline
2
45.150.67.103:7874
-
auth_value
027a9c4511550bd738c5f665a2d25316
Targets
-
-
Target
66B4646D05C237615F220CD5530B776E424EF3482C08B.exe
-
Size
174KB
-
MD5
f8822c5ad94d960211c2e263197a0ee8
-
SHA1
bf11061281f53044bf36b20ad8a89be7a31e1c6e
-
SHA256
66b4646d05c237615f220cd5530b776e424ef3482c08b58bbbaad413c79226bd
-
SHA512
c34d8f5eae9a35bb4e4a169bc9a3853f9a0efa1dbb5098da397aa8f3c792128cc5495e5b78d53af3500d48ca8772e324b1b61e5a507aa09a2e2a7b8a04a64c90
-
SSDEEP
3072:XEVe58FI0i24iXOXCN68SOE0m3m+MCmJc8e8hE:XEHFI0i24iDSOE0CMCma
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-