General
-
Target
c2ecab7748360a8fbc4fad0d6dd515866cba83c7f860e55691a9ef5f9f160f85
-
Size
369KB
-
Sample
211016-et5bzsbfg4
-
MD5
c058ab7b68e85c5fd47825b8fddf798d
-
SHA1
b8b61ae4d65c7a55595780f0674622df3bbf6855
-
SHA256
c2ecab7748360a8fbc4fad0d6dd515866cba83c7f860e55691a9ef5f9f160f85
-
SHA512
cb88fe7377cc3a1e3125a04140724289673acb896bf9eafd9207c79beb5157822531b9fae6627aa141722a3b2a5b2e0aa16386966dc3939d9ddf31e4b8c7a38b
Static task
static1
Malware Config
Extracted
redline
PUB
45.9.20.182:52236
Targets
-
-
Target
c2ecab7748360a8fbc4fad0d6dd515866cba83c7f860e55691a9ef5f9f160f85
-
Size
369KB
-
MD5
c058ab7b68e85c5fd47825b8fddf798d
-
SHA1
b8b61ae4d65c7a55595780f0674622df3bbf6855
-
SHA256
c2ecab7748360a8fbc4fad0d6dd515866cba83c7f860e55691a9ef5f9f160f85
-
SHA512
cb88fe7377cc3a1e3125a04140724289673acb896bf9eafd9207c79beb5157822531b9fae6627aa141722a3b2a5b2e0aa16386966dc3939d9ddf31e4b8c7a38b
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-