General
-
Target
071729088fe38a4afc8df63db9c77d790799129c5582de773a084bf53a48f30d
-
Size
336KB
-
Sample
211021-b3hykahgb6
-
MD5
7a65f5ddd6ae95abb9bfdd2416e7772c
-
SHA1
916dbd279ea28eaa05df74138a3485028e926338
-
SHA256
071729088fe38a4afc8df63db9c77d790799129c5582de773a084bf53a48f30d
-
SHA512
bcf597687453e3a9be346bbf2e2a600f29a9daeb62161d2f0e4d994f9dfb3f889dca4c9e92257da432a32125f42b3cb5844eb7d625d016354c4a20fb31ae764b
Static task
static1
Malware Config
Extracted
redline
UDP
45.9.20.182:52236
Targets
-
-
Target
071729088fe38a4afc8df63db9c77d790799129c5582de773a084bf53a48f30d
-
Size
336KB
-
MD5
7a65f5ddd6ae95abb9bfdd2416e7772c
-
SHA1
916dbd279ea28eaa05df74138a3485028e926338
-
SHA256
071729088fe38a4afc8df63db9c77d790799129c5582de773a084bf53a48f30d
-
SHA512
bcf597687453e3a9be346bbf2e2a600f29a9daeb62161d2f0e4d994f9dfb3f889dca4c9e92257da432a32125f42b3cb5844eb7d625d016354c4a20fb31ae764b
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-