General
-
Target
20d1fe60fd18dbde9567c94ce45181ed3f920fb7590d74b11dddbff229a6be4f
-
Size
285KB
-
Sample
211126-mh8h9sfba7
-
MD5
d42036536c243cb424e698c40fa317de
-
SHA1
80cef345557b8bef912e878e4d47592699395096
-
SHA256
20d1fe60fd18dbde9567c94ce45181ed3f920fb7590d74b11dddbff229a6be4f
-
SHA512
91b4581b9ae9fe63b1ee1070bf461ea41d9612ca62df77e3c00de9f215c6592cea977040a914c5ae63c0e0d7023b14dd89688cd2ec3387a50e539a76f6ecbff4
Static task
static1
Malware Config
Extracted
redline
Updbdate
193.56.146.64:65441
Targets
-
-
Target
20d1fe60fd18dbde9567c94ce45181ed3f920fb7590d74b11dddbff229a6be4f
-
Size
285KB
-
MD5
d42036536c243cb424e698c40fa317de
-
SHA1
80cef345557b8bef912e878e4d47592699395096
-
SHA256
20d1fe60fd18dbde9567c94ce45181ed3f920fb7590d74b11dddbff229a6be4f
-
SHA512
91b4581b9ae9fe63b1ee1070bf461ea41d9612ca62df77e3c00de9f215c6592cea977040a914c5ae63c0e0d7023b14dd89688cd2ec3387a50e539a76f6ecbff4
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-