General
-
Target
c1703b92c47b772769cf62b06c4b201b0886fb49ea1d0e0d2c346eb125cba0a0
-
Size
306KB
-
Sample
240424-rw2p4abe95
-
MD5
339043cd47db7d0eb9110d4bffcfb6a0
-
SHA1
7b0f89570d35cbe9488932ce4a4bbfd78ad754e2
-
SHA256
c1703b92c47b772769cf62b06c4b201b0886fb49ea1d0e0d2c346eb125cba0a0
-
SHA512
8c7f22c33f0253a4cfe10099839a31211cce7c23ada6f3d2496593699fec315f3a183486134eb76cd2051e452ac6f3d0f04926ebb74d41ce1ded8408db4b4380
-
SSDEEP
6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/
Behavioral task
behavioral1
Sample
c1703b92c47b772769cf62b06c4b201b0886fb49ea1d0e0d2c346eb125cba0a0.exe
Resource
win10v2004-20240412-en
Malware Config
Extracted
redline
spoo
103.113.70.99:2630
Targets
-
-
Target
c1703b92c47b772769cf62b06c4b201b0886fb49ea1d0e0d2c346eb125cba0a0
-
Size
306KB
-
MD5
339043cd47db7d0eb9110d4bffcfb6a0
-
SHA1
7b0f89570d35cbe9488932ce4a4bbfd78ad754e2
-
SHA256
c1703b92c47b772769cf62b06c4b201b0886fb49ea1d0e0d2c346eb125cba0a0
-
SHA512
8c7f22c33f0253a4cfe10099839a31211cce7c23ada6f3d2496593699fec315f3a183486134eb76cd2051e452ac6f3d0f04926ebb74d41ce1ded8408db4b4380
-
SSDEEP
6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-