General
-
Target
21401d8bfb0562d9b286e47fac8e1e229ec4183f175c0fcc22384fe0940f9836
-
Size
285KB
-
Sample
211126-bt3llsdab8
-
MD5
8ebf8af68d8b5e59fd33d2987722693b
-
SHA1
e86b69aa7be4c4b773c027b45faa32a9607041ac
-
SHA256
21401d8bfb0562d9b286e47fac8e1e229ec4183f175c0fcc22384fe0940f9836
-
SHA512
3a914b10b072da74700e78b5e7662b63683b0bba9d4c82fa5c4be165961a7cd39f2138925be48bd2eaf8d271ac3f77d52e66ba37abc3b65d52836c024a4d664d
Static task
static1
Malware Config
Extracted
redline
Pubdate
193.56.146.64:65441
Targets
-
-
Target
21401d8bfb0562d9b286e47fac8e1e229ec4183f175c0fcc22384fe0940f9836
-
Size
285KB
-
MD5
8ebf8af68d8b5e59fd33d2987722693b
-
SHA1
e86b69aa7be4c4b773c027b45faa32a9607041ac
-
SHA256
21401d8bfb0562d9b286e47fac8e1e229ec4183f175c0fcc22384fe0940f9836
-
SHA512
3a914b10b072da74700e78b5e7662b63683b0bba9d4c82fa5c4be165961a7cd39f2138925be48bd2eaf8d271ac3f77d52e66ba37abc3b65d52836c024a4d664d
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-