General
-
Target
ac112bd5a2a212fd26f6bfcf3803ec95ec2d603c5f800d743961325d9df321e6
-
Size
306KB
-
Sample
240424-sd2staca7y
-
MD5
5fb3ca74d6917b1d270bcbf19ec98502
-
SHA1
aa66b2967c2e8c5889fa24b490274a7a516f0a3d
-
SHA256
ac112bd5a2a212fd26f6bfcf3803ec95ec2d603c5f800d743961325d9df321e6
-
SHA512
1ee20211229c670efe39b951343245a920856bed909d0f6995f902c85a5c4440941257ac08d6c228e5fe9f7cb48e80a07fc37494db917f656f1e905bd13ba40c
-
SSDEEP
6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/
Behavioral task
behavioral1
Sample
ac112bd5a2a212fd26f6bfcf3803ec95ec2d603c5f800d743961325d9df321e6.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
redline
spoo
103.113.70.99:2630
Targets
-
-
Target
ac112bd5a2a212fd26f6bfcf3803ec95ec2d603c5f800d743961325d9df321e6
-
Size
306KB
-
MD5
5fb3ca74d6917b1d270bcbf19ec98502
-
SHA1
aa66b2967c2e8c5889fa24b490274a7a516f0a3d
-
SHA256
ac112bd5a2a212fd26f6bfcf3803ec95ec2d603c5f800d743961325d9df321e6
-
SHA512
1ee20211229c670efe39b951343245a920856bed909d0f6995f902c85a5c4440941257ac08d6c228e5fe9f7cb48e80a07fc37494db917f656f1e905bd13ba40c
-
SSDEEP
6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-