General
- Target 31694520ace6ebf270337421668c843a
- Size 376KB
- Sample220516-nrpyyshhf2
- SHA256 42a39eb0eff9dccc54ca3d2d555709ec5a7979e8e3f0dbfd3afd2d472fdb814c
- MD5 31694520ace6ebf270337421668c843a
- SHA1 212eaf910f399e6c7686d7c264a2dd8395a11a5c
- SHA512 4c8d682f18396ebcc088333125cac87be32bba64200af94e15d45b96bb87b6d835f97b66659e77a2987c56a9a8e39e077e8d250d81e88022ec1051e433fd1c9c
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
31694520ace6ebf270337421668c843a.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
31694520ace6ebf270337421668c843a.exe
Resource
win10v2004-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
redline
C2
-
178.20.47.241:23253
Attributes
-
auth_value
9d006a439ab657f87bacd7a8c5f366b6
Targets
-
- Target 31694520ace6ebf270337421668c843a
- Size 376KB
- SHA256 42a39eb0eff9dccc54ca3d2d555709ec5a7979e8e3f0dbfd3afd2d472fdb814c
- MD5 31694520ace6ebf270337421668c843a
- SHA1 212eaf910f399e6c7686d7c264a2dd8395a11a5c
- SHA512 4c8d682f18396ebcc088333125cac87be32bba64200af94e15d45b96bb87b6d835f97b66659e77a2987c56a9a8e39e077e8d250d81e88022ec1051e433fd1c9c
- MD5 SHA1 SHA512
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.