General
-
Target
27cc20c03452ed431a492dfe57f7f7689586de42467af930056cb01414798788
-
Size
369KB
-
Sample
211016-f8bhwsbga6
-
MD5
507e1c7d72413992431e9c317ffdca6d
-
SHA1
78cfa38d7c395b921c359c675b75bbf27217fcce
-
SHA256
27cc20c03452ed431a492dfe57f7f7689586de42467af930056cb01414798788
-
SHA512
0f18b4bca2bdfe6b5544b7b1763685da8988e63d7c3df1f400fde4043c367277c576dfa9e04eaa4728979783e63d57176fdf0f37d834d3300250d601ac1e2980
Static task
static1
Malware Config
Extracted
redline
UDP
45.9.20.182:52236
Targets
-
-
Target
27cc20c03452ed431a492dfe57f7f7689586de42467af930056cb01414798788
-
Size
369KB
-
MD5
507e1c7d72413992431e9c317ffdca6d
-
SHA1
78cfa38d7c395b921c359c675b75bbf27217fcce
-
SHA256
27cc20c03452ed431a492dfe57f7f7689586de42467af930056cb01414798788
-
SHA512
0f18b4bca2bdfe6b5544b7b1763685da8988e63d7c3df1f400fde4043c367277c576dfa9e04eaa4728979783e63d57176fdf0f37d834d3300250d601ac1e2980
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-