General
-
Target
18fa9c2b6a5797e16a21451e83a8a14507ad41569cf7bf0197c902d61d43acf8
-
Size
366KB
-
Sample
211015-rj8ymsbae6
-
MD5
49a5ccc7e0dda9810542975efe44375a
-
SHA1
e3397cc299529a7faef453a89fac3f357241c5f9
-
SHA256
18fa9c2b6a5797e16a21451e83a8a14507ad41569cf7bf0197c902d61d43acf8
-
SHA512
b3f3f1e765f90e253c486ac1d54f7d278283a4016c453b927302c4164c534f0d5ae0d0e59ea02cbfaa3204e1dc62e5f93b21aabe14ab749a2f91bf3fcf803482
Static task
static1
Malware Config
Extracted
redline
UTS
45.9.20.182:52236
Targets
-
-
Target
18fa9c2b6a5797e16a21451e83a8a14507ad41569cf7bf0197c902d61d43acf8
-
Size
366KB
-
MD5
49a5ccc7e0dda9810542975efe44375a
-
SHA1
e3397cc299529a7faef453a89fac3f357241c5f9
-
SHA256
18fa9c2b6a5797e16a21451e83a8a14507ad41569cf7bf0197c902d61d43acf8
-
SHA512
b3f3f1e765f90e253c486ac1d54f7d278283a4016c453b927302c4164c534f0d5ae0d0e59ea02cbfaa3204e1dc62e5f93b21aabe14ab749a2f91bf3fcf803482
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-