General
-
Target
ab64de27b5770a1c3fc088518ab266af68d60d35800c22ef88f675022d7cb59a
-
Size
322KB
-
Sample
211028-dhhheahaf9
-
MD5
8a6fce6491d59f16c7f732b36ca59c84
-
SHA1
0d120d28b3615cbe2ca6f93299b999fd7435b34d
-
SHA256
ab64de27b5770a1c3fc088518ab266af68d60d35800c22ef88f675022d7cb59a
-
SHA512
102994e25b15ae02fbcdb76e6ef325dcd3eb58b835db4d6af49aaf9eb6c16567d851a7d6d34c57a5d97530d14b4726ac330e794d7ba01838b59d7d94f5ebd3fe
Static task
static1
Malware Config
Extracted
redline
paladin
193.150.103.37:29118
Targets
-
-
Target
ab64de27b5770a1c3fc088518ab266af68d60d35800c22ef88f675022d7cb59a
-
Size
322KB
-
MD5
8a6fce6491d59f16c7f732b36ca59c84
-
SHA1
0d120d28b3615cbe2ca6f93299b999fd7435b34d
-
SHA256
ab64de27b5770a1c3fc088518ab266af68d60d35800c22ef88f675022d7cb59a
-
SHA512
102994e25b15ae02fbcdb76e6ef325dcd3eb58b835db4d6af49aaf9eb6c16567d851a7d6d34c57a5d97530d14b4726ac330e794d7ba01838b59d7d94f5ebd3fe
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-