General
-
Target
61c7ce61eb2bd52e8a2b42980521bf2bdae865bc36efd11741a475da96241cd8
-
Size
306KB
-
Sample
240424-rqw8esbd82
-
MD5
adfe1899c84decebabdd244f1e26ff1e
-
SHA1
86536d22b7dcf7fe77aca7f45afa502e28f565ab
-
SHA256
61c7ce61eb2bd52e8a2b42980521bf2bdae865bc36efd11741a475da96241cd8
-
SHA512
3533ae852abd6e369e8fe0ea1b1e0a0a9138c6aae2d0f25a5b5c78ab88ea86396fe2340fe1a4ddb117f0534e26b65ad7ef9bd93a7489354275c5042e4469e601
-
SSDEEP
6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/
Behavioral task
behavioral1
Sample
61c7ce61eb2bd52e8a2b42980521bf2bdae865bc36efd11741a475da96241cd8.exe
Resource
win10v2004-20240412-en
Malware Config
Extracted
redline
spoo
103.113.70.99:2630
Targets
-
-
Target
61c7ce61eb2bd52e8a2b42980521bf2bdae865bc36efd11741a475da96241cd8
-
Size
306KB
-
MD5
adfe1899c84decebabdd244f1e26ff1e
-
SHA1
86536d22b7dcf7fe77aca7f45afa502e28f565ab
-
SHA256
61c7ce61eb2bd52e8a2b42980521bf2bdae865bc36efd11741a475da96241cd8
-
SHA512
3533ae852abd6e369e8fe0ea1b1e0a0a9138c6aae2d0f25a5b5c78ab88ea86396fe2340fe1a4ddb117f0534e26b65ad7ef9bd93a7489354275c5042e4469e601
-
SSDEEP
6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-