General
-
Target
build.exe
-
Size
95KB
-
Sample
240420-w6bnwaeg69
-
MD5
870a26be3f9c1558f8c367249c03e57a
-
SHA1
17d395b0ca3d2d6323dbb8f5080ebbda4808dc66
-
SHA256
9f79d381354b5bca4548cedf3dd72b1fa7d4889c80d5dadaf50af4e14ee23eb4
-
SHA512
7d34842b9ceb80ab604fe641eb1e53efb33e994ffca3498c47c7a94604df4baedf24f3a714e3239d4418582cdab2348fe57e7f4e081dcafe400d5c8ece8f4f4c
-
SSDEEP
1536:Nqs4iqeHlbG6jejoigIH43Ywzi0Zb78ivombfexv0ujXyyed203teulgS6pIl:7/pVYH+zi0ZbYe1g0ujyzdaI
Behavioral task
behavioral1
Sample
build.exe
Resource
win10-20240404-en
Malware Config
Extracted
redline
cheat
john-nil.gl.at.ply.gg:32513
Targets
-
-
Target
build.exe
-
Size
95KB
-
MD5
870a26be3f9c1558f8c367249c03e57a
-
SHA1
17d395b0ca3d2d6323dbb8f5080ebbda4808dc66
-
SHA256
9f79d381354b5bca4548cedf3dd72b1fa7d4889c80d5dadaf50af4e14ee23eb4
-
SHA512
7d34842b9ceb80ab604fe641eb1e53efb33e994ffca3498c47c7a94604df4baedf24f3a714e3239d4418582cdab2348fe57e7f4e081dcafe400d5c8ece8f4f4c
-
SSDEEP
1536:Nqs4iqeHlbG6jejoigIH43Ywzi0Zb78ivombfexv0ujXyyed203teulgS6pIl:7/pVYH+zi0ZbYe1g0ujyzdaI
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
SectopRAT payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-