General
-
Target
e8e8f577c5a80947dd48fc9b326f83e9391f544a4cbd64176239d21f55accfb0
-
Size
285KB
-
Sample
211126-h59ydsecg5
-
MD5
938f5dac62ebb74597cdc3d408f2fae7
-
SHA1
31f4f020886b6df03e080fcbe75922896f856170
-
SHA256
e8e8f577c5a80947dd48fc9b326f83e9391f544a4cbd64176239d21f55accfb0
-
SHA512
4f14eedc497e38dc7fbda72b1ec9b92e7f4b2b6ac77b928d57dec89f2025630e9549bbf485f9533b7259edd313adaee0f8970670c8eae5ba5b85ce481fd414f5
Static task
static1
Malware Config
Extracted
redline
udptest
193.56.146.64:65441
Targets
-
-
Target
e8e8f577c5a80947dd48fc9b326f83e9391f544a4cbd64176239d21f55accfb0
-
Size
285KB
-
MD5
938f5dac62ebb74597cdc3d408f2fae7
-
SHA1
31f4f020886b6df03e080fcbe75922896f856170
-
SHA256
e8e8f577c5a80947dd48fc9b326f83e9391f544a4cbd64176239d21f55accfb0
-
SHA512
4f14eedc497e38dc7fbda72b1ec9b92e7f4b2b6ac77b928d57dec89f2025630e9549bbf485f9533b7259edd313adaee0f8970670c8eae5ba5b85ce481fd414f5
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-