General
-
Target
c14d115b8521d8eff7d58acd565a4150b1eed68f112c2cd0b4e035326f831d73
-
Size
343KB
-
Sample
210822-r7zjwx7926
-
MD5
52a74ace007acd62f2984ca7e27056ba
-
SHA1
00cdd8ed9f30384e955b597a5174236553be34d1
-
SHA256
c14d115b8521d8eff7d58acd565a4150b1eed68f112c2cd0b4e035326f831d73
-
SHA512
a92e76367acd21f9a9f29d2ef7ad435686b2bc43a25b46e90e0d5c3ccc0494c14b499a48150cb6b83ee8718eab19f271e38505326e9d745cb3c402fbd1b5f4cf
Static task
static1
Malware Config
Extracted
redline
build1
91.142.77.189:59638
Targets
-
-
Target
c14d115b8521d8eff7d58acd565a4150b1eed68f112c2cd0b4e035326f831d73
-
Size
343KB
-
MD5
52a74ace007acd62f2984ca7e27056ba
-
SHA1
00cdd8ed9f30384e955b597a5174236553be34d1
-
SHA256
c14d115b8521d8eff7d58acd565a4150b1eed68f112c2cd0b4e035326f831d73
-
SHA512
a92e76367acd21f9a9f29d2ef7ad435686b2bc43a25b46e90e0d5c3ccc0494c14b499a48150cb6b83ee8718eab19f271e38505326e9d745cb3c402fbd1b5f4cf
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-