General
-
Target
e6a33dde998b52bf7e62ef69d0b2af956674b3970c2f154207fe72cc4b6057e7
-
Size
285KB
-
Sample
211124-z9scksdffr
-
MD5
2f5ded88f1c37954e66a8737d1f51374
-
SHA1
f16b3df300d46adfa7a6247fff43ddd75a6fe7ee
-
SHA256
e6a33dde998b52bf7e62ef69d0b2af956674b3970c2f154207fe72cc4b6057e7
-
SHA512
58ac1f010b8717f06b2edd9ca92b60bcc1b2e86187a5d0dc5414065b908e3b44c54dd61808cb2769f52e846b535495be3d46a69735ea674d4d0fe59f1ad5518f
Static task
static1
Malware Config
Extracted
redline
Pubdate
193.56.146.64:65441
Targets
-
-
Target
e6a33dde998b52bf7e62ef69d0b2af956674b3970c2f154207fe72cc4b6057e7
-
Size
285KB
-
MD5
2f5ded88f1c37954e66a8737d1f51374
-
SHA1
f16b3df300d46adfa7a6247fff43ddd75a6fe7ee
-
SHA256
e6a33dde998b52bf7e62ef69d0b2af956674b3970c2f154207fe72cc4b6057e7
-
SHA512
58ac1f010b8717f06b2edd9ca92b60bcc1b2e86187a5d0dc5414065b908e3b44c54dd61808cb2769f52e846b535495be3d46a69735ea674d4d0fe59f1ad5518f
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-