General
-
Target
21617ddfd6363ea84886402084d346e1d2854ff623c5f2d8b8391715afbea499
-
Size
113KB
-
Sample
211015-zttwgabec8
-
MD5
ae3f4c6828ce6abe67969a1c9915ab97
-
SHA1
54d1781bb62640487b7b8b38a382d6a0abc21758
-
SHA256
21617ddfd6363ea84886402084d346e1d2854ff623c5f2d8b8391715afbea499
-
SHA512
2db1b8d2acc1da989f2e04de29e92d0095da5646d45e611f5ff5bee828c0709d4f5215e104b861eb0cdde80b79ebda1c3cdb22fc5401159ae4eac11184a6490b
Static task
static1
Malware Config
Extracted
redline
MegaProliv3
93.115.20.139:28978
Targets
-
-
Target
21617ddfd6363ea84886402084d346e1d2854ff623c5f2d8b8391715afbea499
-
Size
113KB
-
MD5
ae3f4c6828ce6abe67969a1c9915ab97
-
SHA1
54d1781bb62640487b7b8b38a382d6a0abc21758
-
SHA256
21617ddfd6363ea84886402084d346e1d2854ff623c5f2d8b8391715afbea499
-
SHA512
2db1b8d2acc1da989f2e04de29e92d0095da5646d45e611f5ff5bee828c0709d4f5215e104b861eb0cdde80b79ebda1c3cdb22fc5401159ae4eac11184a6490b
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-