General
-
Target
d55df20b9c51fe7cd37a9ce10929097c50839b7a3e79a8704e1b0f77669f3915
-
Size
366KB
-
Sample
211015-s4lvaabghl
-
MD5
2ed5329b3465224cfded0571dff66226
-
SHA1
e3eecef8e32dd47adb0d3fc8a2737af53527ffbf
-
SHA256
d55df20b9c51fe7cd37a9ce10929097c50839b7a3e79a8704e1b0f77669f3915
-
SHA512
6cc1128f7e6cb6d6fb9ab40247cc7ed352580e3208fdd07db5c6ccad8a4c036b8b45f7f2b705dd79a8c269c31c120047a3d1889424dc0604219bbd7d781a5a6f
Static task
static1
Malware Config
Extracted
redline
UTS
45.9.20.182:52236
Targets
-
-
Target
d55df20b9c51fe7cd37a9ce10929097c50839b7a3e79a8704e1b0f77669f3915
-
Size
366KB
-
MD5
2ed5329b3465224cfded0571dff66226
-
SHA1
e3eecef8e32dd47adb0d3fc8a2737af53527ffbf
-
SHA256
d55df20b9c51fe7cd37a9ce10929097c50839b7a3e79a8704e1b0f77669f3915
-
SHA512
6cc1128f7e6cb6d6fb9ab40247cc7ed352580e3208fdd07db5c6ccad8a4c036b8b45f7f2b705dd79a8c269c31c120047a3d1889424dc0604219bbd7d781a5a6f
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-