General
-
Target
09a9d0ac201018bb7db76dc4fd5ced1d4663720578e4a3f3cae696986e99eed8
-
Size
405KB
-
Sample
211125-vbddjsbbf6
-
MD5
010d09ac20e9c512b1d3e0a4cdc4ecd7
-
SHA1
c3c0a152c2e1567d96bfe6c285f807aa260fa6a7
-
SHA256
09a9d0ac201018bb7db76dc4fd5ced1d4663720578e4a3f3cae696986e99eed8
-
SHA512
96bd3d38a61c5081604a5c132be41f19bf6de5ec9d93ff32213047320d5829d0d325ade6e7f795c89175cb135653492bc3eacd3f302dbd51b139ca681d37724d
Static task
static1
Malware Config
Extracted
redline
udptest
193.56.146.64:65441
Targets
-
-
Target
09a9d0ac201018bb7db76dc4fd5ced1d4663720578e4a3f3cae696986e99eed8
-
Size
405KB
-
MD5
010d09ac20e9c512b1d3e0a4cdc4ecd7
-
SHA1
c3c0a152c2e1567d96bfe6c285f807aa260fa6a7
-
SHA256
09a9d0ac201018bb7db76dc4fd5ced1d4663720578e4a3f3cae696986e99eed8
-
SHA512
96bd3d38a61c5081604a5c132be41f19bf6de5ec9d93ff32213047320d5829d0d325ade6e7f795c89175cb135653492bc3eacd3f302dbd51b139ca681d37724d
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-