General
-
Target
19e6c1c8b45d1a18878d1f9c2fd211e1.exe
-
Size
96KB
-
Sample
240423-f5eq5sdf73
-
MD5
19e6c1c8b45d1a18878d1f9c2fd211e1
-
SHA1
b22c0ca0112fe2b3b4d84e2baddca84d2e461973
-
SHA256
388f8e4c20dc864b76be96bd03826fb8a429954c4a5e8d1f947d9f7c16b0276a
-
SHA512
32be38283f4622493cf08340079ea6132de62a2c69e3251f83a93150191b182fb30bf3c87d87c7bb81145ca2f07297fb6f272a776db63a5b03bbc636888d2805
-
SSDEEP
1536:DqsSmqnflbG6jejoigIi43Ywzi0Zb78ivombfexv0ujXyyed2vltQulgS6pE:xJw9Yi+zi0ZbYe1g0ujyzdOcE
Behavioral task
behavioral1
Sample
19e6c1c8b45d1a18878d1f9c2fd211e1.exe
Resource
win7-20240220-en
Malware Config
Extracted
redline
Checker
77.221.149.0:5428
Targets
-
-
Target
19e6c1c8b45d1a18878d1f9c2fd211e1.exe
-
Size
96KB
-
MD5
19e6c1c8b45d1a18878d1f9c2fd211e1
-
SHA1
b22c0ca0112fe2b3b4d84e2baddca84d2e461973
-
SHA256
388f8e4c20dc864b76be96bd03826fb8a429954c4a5e8d1f947d9f7c16b0276a
-
SHA512
32be38283f4622493cf08340079ea6132de62a2c69e3251f83a93150191b182fb30bf3c87d87c7bb81145ca2f07297fb6f272a776db63a5b03bbc636888d2805
-
SSDEEP
1536:DqsSmqnflbG6jejoigIi43Ywzi0Zb78ivombfexv0ujXyyed2vltQulgS6pE:xJw9Yi+zi0ZbYe1g0ujyzdOcE
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
SectopRAT payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-