General
-
Target
95ef4bac458ee1d057592be0ed42ccb960f5ddb9ab3c4305e7f7411c82b7abde
-
Size
243KB
-
Sample
210926-tna9aafacq
-
MD5
1978944a4f9b3ff5a71f0c436c60e63a
-
SHA1
408fe9331992073ca3141caef2030a41d9f74240
-
SHA256
95ef4bac458ee1d057592be0ed42ccb960f5ddb9ab3c4305e7f7411c82b7abde
-
SHA512
b78485cf846d5ab539e1f448baeb6fff56a6eeb393edf5ff52a7aad8db08b1c4fa5f3f60385ed18f5f189e82b3ee20bc1fb6ea201b1ee585cbe67b91e11cc630
Static task
static1
Malware Config
Extracted
redline
UDP
45.9.20.20:13441
Targets
-
-
Target
95ef4bac458ee1d057592be0ed42ccb960f5ddb9ab3c4305e7f7411c82b7abde
-
Size
243KB
-
MD5
1978944a4f9b3ff5a71f0c436c60e63a
-
SHA1
408fe9331992073ca3141caef2030a41d9f74240
-
SHA256
95ef4bac458ee1d057592be0ed42ccb960f5ddb9ab3c4305e7f7411c82b7abde
-
SHA512
b78485cf846d5ab539e1f448baeb6fff56a6eeb393edf5ff52a7aad8db08b1c4fa5f3f60385ed18f5f189e82b3ee20bc1fb6ea201b1ee585cbe67b91e11cc630
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-