General
-
Target
cc68177b33bc1862decc9d99c97d3534cdcd71f61c3d745c5c4ebabb91a45f42
-
Size
305KB
-
Sample
240424-m9a23shb3z
-
MD5
c274bd2d65671ff025dcd90e22efd132
-
SHA1
7dd6dcd79bdf48050bd77cc881fb01279b94813b
-
SHA256
cc68177b33bc1862decc9d99c97d3534cdcd71f61c3d745c5c4ebabb91a45f42
-
SHA512
e902c0064ae9458f24c05dc1c63dfcd507bc2fbf6626679c18d4cf50397667c23458cca1d4c74b80ecc3d7d9e4aa7eda6cdb15fc0f839b3ec1527bbb41ea14c6
-
SSDEEP
6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/
Behavioral task
behavioral1
Sample
cc68177b33bc1862decc9d99c97d3534cdcd71f61c3d745c5c4ebabb91a45f42.exe
Resource
win10v2004-20240412-en
Malware Config
Extracted
redline
spoo
103.113.70.99:2630
Targets
-
-
Target
cc68177b33bc1862decc9d99c97d3534cdcd71f61c3d745c5c4ebabb91a45f42
-
Size
305KB
-
MD5
c274bd2d65671ff025dcd90e22efd132
-
SHA1
7dd6dcd79bdf48050bd77cc881fb01279b94813b
-
SHA256
cc68177b33bc1862decc9d99c97d3534cdcd71f61c3d745c5c4ebabb91a45f42
-
SHA512
e902c0064ae9458f24c05dc1c63dfcd507bc2fbf6626679c18d4cf50397667c23458cca1d4c74b80ecc3d7d9e4aa7eda6cdb15fc0f839b3ec1527bbb41ea14c6
-
SSDEEP
6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-