General
-
Target
9995f44edede8afef849090432e98064d584c55471124850867620c4f0f397a5
-
Size
624KB
-
Sample
211123-s1wkbaaedj
-
MD5
e93861c6783582541a7529d0c5466df9
-
SHA1
6c35da40a2a8bc95211e246ac29cb13b1d3c9d18
-
SHA256
9995f44edede8afef849090432e98064d584c55471124850867620c4f0f397a5
-
SHA512
00ce72cd061504c6a81dfcf22597b3834f89bbb18eebffd93177f846b8a8cabf00fb85f4f256a47d4e83215a06d28b30a971e04604d85704728f2fc157d4fe10
Static task
static1
Malware Config
Extracted
redline
Firefox
194.127.179.0:42417
Targets
-
-
Target
9995f44edede8afef849090432e98064d584c55471124850867620c4f0f397a5
-
Size
624KB
-
MD5
e93861c6783582541a7529d0c5466df9
-
SHA1
6c35da40a2a8bc95211e246ac29cb13b1d3c9d18
-
SHA256
9995f44edede8afef849090432e98064d584c55471124850867620c4f0f397a5
-
SHA512
00ce72cd061504c6a81dfcf22597b3834f89bbb18eebffd93177f846b8a8cabf00fb85f4f256a47d4e83215a06d28b30a971e04604d85704728f2fc157d4fe10
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-