General
-
Target
1e027121c04e951573676342b6badb204b407c555d77c1560142e3a056a14203
-
Size
285KB
-
Sample
211126-k9cjssbean
-
MD5
c01340aecd6ff4453bae86be816da282
-
SHA1
6e2e6b3e984d446e4edc798b1852f0978507e241
-
SHA256
1e027121c04e951573676342b6badb204b407c555d77c1560142e3a056a14203
-
SHA512
e815c049c1b03d3475204bc98c21ace791aa5c5227e30df497cd6b5acd43ce1b15375afb6bcd70796e5f6c241044920667843f320be0c229669b606657593ecc
Static task
static1
Malware Config
Extracted
redline
Pubdate
193.56.146.64:65441
Targets
-
-
Target
1e027121c04e951573676342b6badb204b407c555d77c1560142e3a056a14203
-
Size
285KB
-
MD5
c01340aecd6ff4453bae86be816da282
-
SHA1
6e2e6b3e984d446e4edc798b1852f0978507e241
-
SHA256
1e027121c04e951573676342b6badb204b407c555d77c1560142e3a056a14203
-
SHA512
e815c049c1b03d3475204bc98c21ace791aa5c5227e30df497cd6b5acd43ce1b15375afb6bcd70796e5f6c241044920667843f320be0c229669b606657593ecc
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-