General
-
Target
d379063ff5791810690880b0361ffd82e54cc6041100aac7796baa6e5f6ada27
-
Size
249KB
-
Sample
210926-qzb36sehe6
-
MD5
e6e715287f35a3f71190b0883d3bd8c9
-
SHA1
4083f0e81a51d8db3b138c621b6c15ff45285180
-
SHA256
d379063ff5791810690880b0361ffd82e54cc6041100aac7796baa6e5f6ada27
-
SHA512
08ec274a4f9a8c3ebc02e7184d2d235b00aa541b0028c0a0101ef01afa722474e4bda4123aa5d90e3df01cfedfad0eb7715296fd0d61bacedccfecacfaefa54f
Static task
static1
Malware Config
Extracted
redline
PUB
45.9.20.20:13441
Targets
-
-
Target
d379063ff5791810690880b0361ffd82e54cc6041100aac7796baa6e5f6ada27
-
Size
249KB
-
MD5
e6e715287f35a3f71190b0883d3bd8c9
-
SHA1
4083f0e81a51d8db3b138c621b6c15ff45285180
-
SHA256
d379063ff5791810690880b0361ffd82e54cc6041100aac7796baa6e5f6ada27
-
SHA512
08ec274a4f9a8c3ebc02e7184d2d235b00aa541b0028c0a0101ef01afa722474e4bda4123aa5d90e3df01cfedfad0eb7715296fd0d61bacedccfecacfaefa54f
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-