General
-
Target
2959737639d10268b39ee8d9cb1a5a7e69475b7bdedf28e8f9d2bfdf47f12912
-
Size
336KB
-
Sample
211021-krss3aahbp
-
MD5
eaefeda865f4e0723fe255ee10f3eb85
-
SHA1
1c15110340404cf200298f92f4d812b8768aa3ba
-
SHA256
2959737639d10268b39ee8d9cb1a5a7e69475b7bdedf28e8f9d2bfdf47f12912
-
SHA512
7b064f177936ff289b058e7b403a9793a7fc86ae5c29a39d9021ee3508d90f21647a73cec8ad5e78e1e96ab8ed0998d58cca1e245c0d7861611a23d3c647d4f4
Static task
static1
Malware Config
Extracted
redline
UTS
45.9.20.182:52236
Targets
-
-
Target
2959737639d10268b39ee8d9cb1a5a7e69475b7bdedf28e8f9d2bfdf47f12912
-
Size
336KB
-
MD5
eaefeda865f4e0723fe255ee10f3eb85
-
SHA1
1c15110340404cf200298f92f4d812b8768aa3ba
-
SHA256
2959737639d10268b39ee8d9cb1a5a7e69475b7bdedf28e8f9d2bfdf47f12912
-
SHA512
7b064f177936ff289b058e7b403a9793a7fc86ae5c29a39d9021ee3508d90f21647a73cec8ad5e78e1e96ab8ed0998d58cca1e245c0d7861611a23d3c647d4f4
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-