General
-
Target
e220074db3744526376ffeaecbddb75fda9f082395555b4f9efe36a01e6aabb5
-
Size
305KB
-
Sample
240424-psxwmaaa2y
-
MD5
ce13de75d22fd12f651f949c46d5a7d9
-
SHA1
0d5ea1328c7917c86d15ce4d2e05d51f8a4e7eb7
-
SHA256
e220074db3744526376ffeaecbddb75fda9f082395555b4f9efe36a01e6aabb5
-
SHA512
de5426b73c2b8a27b8fbf5e21ac8adf75c73d7e190573ba0ef7405736fb5d1a85cc020e3ac1dbc80e07ada8737608df138b587cade8d74eebda839dcb7694a1e
-
SSDEEP
6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/
Behavioral task
behavioral1
Sample
e220074db3744526376ffeaecbddb75fda9f082395555b4f9efe36a01e6aabb5.exe
Resource
win10v2004-20240412-en
Malware Config
Extracted
redline
spoo
103.113.70.99:2630
Targets
-
-
Target
e220074db3744526376ffeaecbddb75fda9f082395555b4f9efe36a01e6aabb5
-
Size
305KB
-
MD5
ce13de75d22fd12f651f949c46d5a7d9
-
SHA1
0d5ea1328c7917c86d15ce4d2e05d51f8a4e7eb7
-
SHA256
e220074db3744526376ffeaecbddb75fda9f082395555b4f9efe36a01e6aabb5
-
SHA512
de5426b73c2b8a27b8fbf5e21ac8adf75c73d7e190573ba0ef7405736fb5d1a85cc020e3ac1dbc80e07ada8737608df138b587cade8d74eebda839dcb7694a1e
-
SSDEEP
6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-