General
-
Target
83a3410458dc24f2be30b6f7be0f41008c07e5b9b8808f7157a86a3faadfbd95
-
Size
338KB
-
Sample
211019-yyg7ssgda9
-
MD5
195d2a61c26dcdbfae8be2384fd7eef4
-
SHA1
58b71fd3fc07e2725757fd4e642900f449466e14
-
SHA256
83a3410458dc24f2be30b6f7be0f41008c07e5b9b8808f7157a86a3faadfbd95
-
SHA512
93875065842e459c1e41eeba69ea38103789cda5cdcd01c429f7caef15650a12f45984de16e38699c8d1cfa460d1b39c948a5a7e434ee0291b7f51d93f95339d
Static task
static1
Malware Config
Extracted
redline
UDP
45.9.20.182:52236
Targets
-
-
Target
83a3410458dc24f2be30b6f7be0f41008c07e5b9b8808f7157a86a3faadfbd95
-
Size
338KB
-
MD5
195d2a61c26dcdbfae8be2384fd7eef4
-
SHA1
58b71fd3fc07e2725757fd4e642900f449466e14
-
SHA256
83a3410458dc24f2be30b6f7be0f41008c07e5b9b8808f7157a86a3faadfbd95
-
SHA512
93875065842e459c1e41eeba69ea38103789cda5cdcd01c429f7caef15650a12f45984de16e38699c8d1cfa460d1b39c948a5a7e434ee0291b7f51d93f95339d
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-