General
-
Target
41f6a171771343fc07cf659202253561e2cb68edd1d1a6e5b0c3b997b122ecb8
-
Size
239KB
-
Sample
210926-xw3v2sfbgk
-
MD5
0c01abf909ce10b8a9e6b89c47d0ad89
-
SHA1
218d4a81ee0ab6ba30f91a333e50a8506547f0a1
-
SHA256
41f6a171771343fc07cf659202253561e2cb68edd1d1a6e5b0c3b997b122ecb8
-
SHA512
5621b9000421655d99996df920897d0c8c0f2cae213a6bf0d599cdc18aa80937a6c8fc3896ec17da31d1e9b689f35080bb274aada8ec6d378070a74584a3331d
Static task
static1
Malware Config
Extracted
redline
UTS
45.9.20.20:13441
Targets
-
-
Target
41f6a171771343fc07cf659202253561e2cb68edd1d1a6e5b0c3b997b122ecb8
-
Size
239KB
-
MD5
0c01abf909ce10b8a9e6b89c47d0ad89
-
SHA1
218d4a81ee0ab6ba30f91a333e50a8506547f0a1
-
SHA256
41f6a171771343fc07cf659202253561e2cb68edd1d1a6e5b0c3b997b122ecb8
-
SHA512
5621b9000421655d99996df920897d0c8c0f2cae213a6bf0d599cdc18aa80937a6c8fc3896ec17da31d1e9b689f35080bb274aada8ec6d378070a74584a3331d
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-