General
-
Target
92738f384b489cd1dad580ec78b948fa37c547e8bf84ac415d4fffca9ced3f9c
-
Size
336KB
-
Sample
211021-a14a2safan
-
MD5
75b1d370dcd9c71d11b46066e1c7456f
-
SHA1
e630a6427b2a86929ea7a1bb3b46aa19ef491921
-
SHA256
92738f384b489cd1dad580ec78b948fa37c547e8bf84ac415d4fffca9ced3f9c
-
SHA512
a141daaf73dc7eb142f4910bf49cb610be6e421d9a7a20f617a05139c77f21940f15723dfa071c0fa015cdcc06f8f33ef603820665d07d0b620cf4bd6ff35032
Static task
static1
Malware Config
Extracted
redline
PUB
45.9.20.182:52236
Targets
-
-
Target
92738f384b489cd1dad580ec78b948fa37c547e8bf84ac415d4fffca9ced3f9c
-
Size
336KB
-
MD5
75b1d370dcd9c71d11b46066e1c7456f
-
SHA1
e630a6427b2a86929ea7a1bb3b46aa19ef491921
-
SHA256
92738f384b489cd1dad580ec78b948fa37c547e8bf84ac415d4fffca9ced3f9c
-
SHA512
a141daaf73dc7eb142f4910bf49cb610be6e421d9a7a20f617a05139c77f21940f15723dfa071c0fa015cdcc06f8f33ef603820665d07d0b620cf4bd6ff35032
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-