General
-
Target
353228329239a8e504b77a9a212952b55d78e4c789c5def85e09935f70518bae
-
Size
306KB
-
Sample
240424-rh7desbc63
-
MD5
25e7e39384ec08209399a0bdea67366e
-
SHA1
84c8bbe57fcdb46f9326ee3487c4ee9481a7e75d
-
SHA256
353228329239a8e504b77a9a212952b55d78e4c789c5def85e09935f70518bae
-
SHA512
30c26b07e90113ea447eb0bef1617cea6d5bc56b84d55bb0ff9ac070d2857f743256c4cbb6784d36c805037ae9ea5fdd44a007b272ca39d4feda9f7e439a1a63
-
SSDEEP
6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/
Behavioral task
behavioral1
Sample
353228329239a8e504b77a9a212952b55d78e4c789c5def85e09935f70518bae.exe
Resource
win10v2004-20240412-en
Malware Config
Extracted
redline
spoo
103.113.70.99:2630
Targets
-
-
Target
353228329239a8e504b77a9a212952b55d78e4c789c5def85e09935f70518bae
-
Size
306KB
-
MD5
25e7e39384ec08209399a0bdea67366e
-
SHA1
84c8bbe57fcdb46f9326ee3487c4ee9481a7e75d
-
SHA256
353228329239a8e504b77a9a212952b55d78e4c789c5def85e09935f70518bae
-
SHA512
30c26b07e90113ea447eb0bef1617cea6d5bc56b84d55bb0ff9ac070d2857f743256c4cbb6784d36c805037ae9ea5fdd44a007b272ca39d4feda9f7e439a1a63
-
SSDEEP
6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-