General
-
Target
43f51a0650949ff03b86381806ae8d03820e0d7e17fb90dc62cf14eecd529726
-
Size
306KB
-
Sample
240424-rm3wssbe2s
-
MD5
620b448e3bb1407d68137cc7f43f3dd5
-
SHA1
82797be1ae9f63d4723620890b0c79023318bf4e
-
SHA256
43f51a0650949ff03b86381806ae8d03820e0d7e17fb90dc62cf14eecd529726
-
SHA512
889b7c45bc956de8e0a07c6d65f6de9369d9dfb8cfffa43f2f736a732be65cd32b22fd227609fa4b9fded0c80446d954cb92937a5f80c624b57bc0772de42ce4
-
SSDEEP
6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/
Behavioral task
behavioral1
Sample
43f51a0650949ff03b86381806ae8d03820e0d7e17fb90dc62cf14eecd529726.exe
Resource
win10v2004-20240412-en
Malware Config
Extracted
redline
spoo
103.113.70.99:2630
Targets
-
-
Target
43f51a0650949ff03b86381806ae8d03820e0d7e17fb90dc62cf14eecd529726
-
Size
306KB
-
MD5
620b448e3bb1407d68137cc7f43f3dd5
-
SHA1
82797be1ae9f63d4723620890b0c79023318bf4e
-
SHA256
43f51a0650949ff03b86381806ae8d03820e0d7e17fb90dc62cf14eecd529726
-
SHA512
889b7c45bc956de8e0a07c6d65f6de9369d9dfb8cfffa43f2f736a732be65cd32b22fd227609fa4b9fded0c80446d954cb92937a5f80c624b57bc0772de42ce4
-
SSDEEP
6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-