General
-
Target
96c492f131ad78dd56a5f3f9d23d7481e9e3c7832073fe93e9ebe25d6a0b9e7c
-
Size
249KB
-
Sample
210926-mw4r8sefcm
-
MD5
18c7499572a856f9cad7d545ca80fc1d
-
SHA1
ec495bc8dd906f4a03dc05e512ec8edffba105ee
-
SHA256
96c492f131ad78dd56a5f3f9d23d7481e9e3c7832073fe93e9ebe25d6a0b9e7c
-
SHA512
14c96b76b5dc18ea8361a760dfb30a50d924fe58373a76bb6d776bbf98efed38f77033cce11b0d8749dac6e602b641028ed1dddf3ea5461c456275c9dabccb0b
Static task
static1
Malware Config
Extracted
redline
ruzki7.5k
91.142.77.155:5469
Targets
-
-
Target
96c492f131ad78dd56a5f3f9d23d7481e9e3c7832073fe93e9ebe25d6a0b9e7c
-
Size
249KB
-
MD5
18c7499572a856f9cad7d545ca80fc1d
-
SHA1
ec495bc8dd906f4a03dc05e512ec8edffba105ee
-
SHA256
96c492f131ad78dd56a5f3f9d23d7481e9e3c7832073fe93e9ebe25d6a0b9e7c
-
SHA512
14c96b76b5dc18ea8361a760dfb30a50d924fe58373a76bb6d776bbf98efed38f77033cce11b0d8749dac6e602b641028ed1dddf3ea5461c456275c9dabccb0b
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-