General
-
Target
build.exe
-
Size
95KB
-
Sample
240420-rvz5waaf65
-
MD5
61491b49f5279ae09205b009f9e80b50
-
SHA1
c782b86f219cf6776ce6c5345f300169e492669f
-
SHA256
32691d92b5fa1c718dd81e137d154c7c0a5cc9f2c9f490abdab49bcbe0895be8
-
SHA512
299746bc4728556d46e674fed288fff52225d4ec6a3ccae181efbae701517fc335306072a7e59fb20cac964c1c9e90c226546daa22fe533af38f75acbdcf3488
-
SSDEEP
1536:RqsqFqJklbG6jejoigIg43Ywzi0Zb78ivombfexv0ujXyyed213tmulgS6pE:/6ScYg+zi0ZbYe1g0ujyzdBE
Malware Config
Extracted
redline
cheat
requires-rear.gl.at.ply.gg:32266
Targets
-
-
Target
build.exe
-
Size
95KB
-
MD5
61491b49f5279ae09205b009f9e80b50
-
SHA1
c782b86f219cf6776ce6c5345f300169e492669f
-
SHA256
32691d92b5fa1c718dd81e137d154c7c0a5cc9f2c9f490abdab49bcbe0895be8
-
SHA512
299746bc4728556d46e674fed288fff52225d4ec6a3ccae181efbae701517fc335306072a7e59fb20cac964c1c9e90c226546daa22fe533af38f75acbdcf3488
-
SSDEEP
1536:RqsqFqJklbG6jejoigIg43Ywzi0Zb78ivombfexv0ujXyyed213tmulgS6pE:/6ScYg+zi0ZbYe1g0ujyzdBE
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
SectopRAT payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-