General
-
Target
ebb2155b6c22a5755dad0626685316a811174d9b4d5adae360a67c334da7c0e1
-
Size
306KB
-
Sample
240424-rk73qsbd6w
-
MD5
32b956c5c9fb4e042e0e5057d4d0709d
-
SHA1
d039d716a66a7ba13ccda83988d62092e974ed6e
-
SHA256
ebb2155b6c22a5755dad0626685316a811174d9b4d5adae360a67c334da7c0e1
-
SHA512
ecaf19eb060f9485a9d3db541236c4a3f542a6d8431cf62315748f0fc72e35bae5201d9f341f21b048795e83a5151579ac47b8b697bf23200918cc4f930af3eb
-
SSDEEP
6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/
Behavioral task
behavioral1
Sample
ebb2155b6c22a5755dad0626685316a811174d9b4d5adae360a67c334da7c0e1.exe
Resource
win10v2004-20240412-en
Malware Config
Extracted
redline
spoo
103.113.70.99:2630
Targets
-
-
Target
ebb2155b6c22a5755dad0626685316a811174d9b4d5adae360a67c334da7c0e1
-
Size
306KB
-
MD5
32b956c5c9fb4e042e0e5057d4d0709d
-
SHA1
d039d716a66a7ba13ccda83988d62092e974ed6e
-
SHA256
ebb2155b6c22a5755dad0626685316a811174d9b4d5adae360a67c334da7c0e1
-
SHA512
ecaf19eb060f9485a9d3db541236c4a3f542a6d8431cf62315748f0fc72e35bae5201d9f341f21b048795e83a5151579ac47b8b697bf23200918cc4f930af3eb
-
SSDEEP
6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-