General
-
Target
dd0c2fa2e656d46b4872773f09527713258a02118e284eecdb399dc93836e66b
-
Size
306KB
-
Sample
240424-qw4zsaah2x
-
MD5
b8bf22b2fa1e67bf7680f0afd100ffe6
-
SHA1
fb23b40e2fee36e22374c8fc1365a09f971f4116
-
SHA256
dd0c2fa2e656d46b4872773f09527713258a02118e284eecdb399dc93836e66b
-
SHA512
cf1850c83c3fbeced423bdae2606a362c6eec77a9c2d1033b95895318bcc383ff611f7294699936c87fb2919e3b77a5d147d9ef1777620675272953c130ba102
-
SSDEEP
6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/
Behavioral task
behavioral1
Sample
dd0c2fa2e656d46b4872773f09527713258a02118e284eecdb399dc93836e66b.exe
Resource
win10v2004-20240412-en
Malware Config
Extracted
redline
spoo
103.113.70.99:2630
Targets
-
-
Target
dd0c2fa2e656d46b4872773f09527713258a02118e284eecdb399dc93836e66b
-
Size
306KB
-
MD5
b8bf22b2fa1e67bf7680f0afd100ffe6
-
SHA1
fb23b40e2fee36e22374c8fc1365a09f971f4116
-
SHA256
dd0c2fa2e656d46b4872773f09527713258a02118e284eecdb399dc93836e66b
-
SHA512
cf1850c83c3fbeced423bdae2606a362c6eec77a9c2d1033b95895318bcc383ff611f7294699936c87fb2919e3b77a5d147d9ef1777620675272953c130ba102
-
SSDEEP
6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-